Test ID:	1.3.6.1.4.1.25623.1.0.106490
Category:	Web application abuses
Title:	phpMyAdmin Multiple Vulnerabilities (PMASA-2016-38) - Linux
Summary:	phpMyAdmin is prone to a SQL injection and multiple cross-site scripting vulnerabilities.
Description:	Summary: phpMyAdmin is prone to a SQL injection and multiple cross-site scripting vulnerabilities. Vulnerability Insight: Multiple XSS vulnerabilities were found in the following areas: - Navigation pane and database/table hiding feature. A specially-crafted database name can be used to trigger an XSS attack. - The 'Tracking' feature. A specially-crafted query can be used to trigger an XSS attack. - GIS visualization feature. An additional vulnerability was found in the 'User group' and 'Designer' features: - a user can execute an SQL injection attack against the account of the control user. Affected Software/OS: phpMyAdmin versions 4.4.x prior to 4.4.15.8 and 4.6.x prior to 4.6.4. Solution: Update to version 4.4.15.8 or 4.6.4. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6615 BugTraq ID: 95041 http://www.securityfocus.com/bid/95041 https://security.gentoo.org/glsa/201701-32 https://lists.debian.org/debian-lts-announce/2018/07/msg00006.html Common Vulnerability Exposure (CVE) ID: CVE-2016-6616 BugTraq ID: 95042 http://www.securityfocus.com/bid/95042
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.