Description
phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the preg_replace e (aka eval) modifier, which might allow remote attackers to execute arbitrary PHP code via a crafted string, as demonstrated by the table search-and-replace implementation.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Github GHSA |
GHSA-rv57-479x-x4qv | phpMyAdmin Code Injection vulnerability |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T01:08:00.523Z
Reserved: 2016-06-21T00:00:00.000Z
Link: CVE-2016-5734
No data.
Status : Modified
Published: 2016-07-03T01:59:24.753
Modified: 2026-05-06T22:30:45.220
Link: CVE-2016-5734
No data.
OpenCVE Enrichment
No data.
Weaknesses
Github GHSA