Lucene search

MitreCVE-2016-6627

HistoryDec 11, 2016 - 2:59 a.m.

CVE-2016-6627

2016-12-1102:59:35

CWE-200

mitre

web.nvd.nist.gov

phpmyadmin

security vulnerability

host location

cve-2016-6627

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

56.0%

JSON

An issue was discovered in phpMyAdmin. An attacker can determine the phpMyAdmin host location through the file url.php. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

Affected configurations

Nvd

Node

phpmyadminphpmyadminMatch4.0.0

phpmyadminphpmyadminMatch4.0.1

phpmyadminphpmyadminMatch4.0.2

phpmyadminphpmyadminMatch4.0.3

phpmyadminphpmyadminMatch4.0.4

phpmyadminphpmyadminMatch4.0.4.1

phpmyadminphpmyadminMatch4.0.4.2

phpmyadminphpmyadminMatch4.0.5

phpmyadminphpmyadminMatch4.0.6

phpmyadminphpmyadminMatch4.0.7

phpmyadminphpmyadminMatch4.0.8

phpmyadminphpmyadminMatch4.0.9

phpmyadminphpmyadminMatch4.0.10

phpmyadminphpmyadminMatch4.0.10.1

phpmyadminphpmyadminMatch4.0.10.2

phpmyadminphpmyadminMatch4.0.10.3

phpmyadminphpmyadminMatch4.0.10.4

phpmyadminphpmyadminMatch4.0.10.5

phpmyadminphpmyadminMatch4.0.10.6

phpmyadminphpmyadminMatch4.0.10.7

phpmyadminphpmyadminMatch4.0.10.8

phpmyadminphpmyadminMatch4.0.10.9

phpmyadminphpmyadminMatch4.0.10.10

phpmyadminphpmyadminMatch4.0.10.11

phpmyadminphpmyadminMatch4.0.10.12

phpmyadminphpmyadminMatch4.0.10.13

phpmyadminphpmyadminMatch4.0.10.14

phpmyadminphpmyadminMatch4.0.10.15

phpmyadminphpmyadminMatch4.0.10.16

Node

phpmyadminphpmyadminMatch4.4.0

phpmyadminphpmyadminMatch4.4.1

phpmyadminphpmyadminMatch4.4.1.1

phpmyadminphpmyadminMatch4.4.2

phpmyadminphpmyadminMatch4.4.3

phpmyadminphpmyadminMatch4.4.4

phpmyadminphpmyadminMatch4.4.5

phpmyadminphpmyadminMatch4.4.6

phpmyadminphpmyadminMatch4.4.6.1

phpmyadminphpmyadminMatch4.4.7

phpmyadminphpmyadminMatch4.4.8

phpmyadminphpmyadminMatch4.4.9

phpmyadminphpmyadminMatch4.4.10

phpmyadminphpmyadminMatch4.4.11

phpmyadminphpmyadminMatch4.4.12

phpmyadminphpmyadminMatch4.4.13

phpmyadminphpmyadminMatch4.4.13.1

phpmyadminphpmyadminMatch4.4.14

phpmyadminphpmyadminMatch4.4.14.1

phpmyadminphpmyadminMatch4.4.15

phpmyadminphpmyadminMatch4.4.15.1

phpmyadminphpmyadminMatch4.4.15.2

phpmyadminphpmyadminMatch4.4.15.3

phpmyadminphpmyadminMatch4.4.15.4

phpmyadminphpmyadminMatch4.4.15.5

phpmyadminphpmyadminMatch4.4.15.6

phpmyadminphpmyadminMatch4.4.15.7

Node

phpmyadminphpmyadminMatch4.6.0

phpmyadminphpmyadminMatch4.6.1

phpmyadminphpmyadminMatch4.6.2

phpmyadminphpmyadminMatch4.6.3

VendorProductVersionCPE
phpmyadminphpmyadmin4.0.0cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin4.0.1cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin4.0.2cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.2:*:*:*:*:*:*:*
phpmyadminphpmyadmin4.0.3cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.3:*:*:*:*:*:*:*
phpmyadminphpmyadmin4.0.4cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*:*:*:*:*:*:*
phpmyadminphpmyadmin4.0.4.1cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin4.0.4.2cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.2:*:*:*:*:*:*:*
phpmyadminphpmyadmin4.0.5cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.5:*:*:*:*:*:*:*
phpmyadminphpmyadmin4.0.6cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.6:*:*:*:*:*:*:*
phpmyadminphpmyadmin4.0.7cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpmyadmin	phpmyadmin	4.0.0	cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:::::::*
phpmyadmin	phpmyadmin	4.0.1	cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:::::::*
phpmyadmin	phpmyadmin	4.0.2	cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.2:::::::*
phpmyadmin	phpmyadmin	4.0.3	cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.3:::::::*
phpmyadmin	phpmyadmin	4.0.4	cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:::::::*
phpmyadmin	phpmyadmin	4.0.4.1	cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:::::::*
phpmyadmin	phpmyadmin	4.0.4.2	cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.2:::::::*
phpmyadmin	phpmyadmin	4.0.5	cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.5:::::::*
phpmyadmin	phpmyadmin	4.0.6	cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.6:::::::*
phpmyadmin	phpmyadmin	4.0.7	cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.7:::::::*