CVE-2016-5703: SQL Injection
Published Jul 3, 2016
·Updated
SQL injection vulnerability in libraries/centralcolumns.lib.php in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allows remote attackers to execute arbitrary SQL commands via a crafted database name that is mishandled in a central column query.
Affected Software
34 affected components
openSUSE Leap=42.1
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
phpMyAdmin phpMyAdmin=4.4.0
phpMyAdmin phpMyAdmin=4.4.1
phpMyAdmin phpMyAdmin=4.4.1.1
phpMyAdmin phpMyAdmin=4.4.2
phpMyAdmin phpMyAdmin=4.4.3
phpMyAdmin phpMyAdmin=4.4.4
phpMyAdmin phpMyAdmin=4.4.5
phpMyAdmin phpMyAdmin=4.4.6
phpMyAdmin phpMyAdmin=4.4.6.1
phpMyAdmin phpMyAdmin=4.4.7
phpMyAdmin phpMyAdmin=4.4.8
phpMyAdmin phpMyAdmin=4.4.9
phpMyAdmin phpMyAdmin=4.4.10
phpMyAdmin phpMyAdmin=4.4.11
phpMyAdmin phpMyAdmin=4.4.12
phpMyAdmin phpMyAdmin=4.4.13
phpMyAdmin phpMyAdmin=4.4.13.1
phpMyAdmin phpMyAdmin=4.4.14.1
phpMyAdmin phpMyAdmin=4.4.15
phpMyAdmin phpMyAdmin=4.4.15.1
phpMyAdmin phpMyAdmin=4.4.15.2
phpMyAdmin phpMyAdmin=4.4.15.3
phpMyAdmin phpMyAdmin=4.4.15.4
phpMyAdmin phpMyAdmin=4.4.15.5
phpMyAdmin phpMyAdmin=4.4.15.6
phpMyAdmin phpMyAdmin=4.6.0
phpMyAdmin phpMyAdmin=4.6.0-alpha1
phpMyAdmin phpMyAdmin=4.6.0-rc1
phpMyAdmin phpMyAdmin=4.6.0-rc2
phpMyAdmin phpMyAdmin=4.6.1
phpMyAdmin phpMyAdmin=4.6.2
Remediation
Patch Available
Event History
Jul 3, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-5703?
CVE-2016-5703 has a medium severity rating due to its potential for remote SQL injection attacks.
2
How do I fix CVE-2016-5703?
To fix CVE-2016-5703, upgrade phpMyAdmin to versions 4.4.15.7 or 4.6.3 and above.
3
Which versions of phpMyAdmin are affected by CVE-2016-5703?
Versions of phpMyAdmin from 4.4.0 to 4.4.15.6 and 4.6.0 to 4.6.2 are affected by CVE-2016-5703.
4
Is CVE-2016-5703 a common vulnerability?
CVE-2016-5703 is considered a common vulnerability as it allows attackers to exploit SQL commands remotely.
5
What types of systems are vulnerable to CVE-2016-5703?
CVE-2016-5703 affects systems running specific versions of phpMyAdmin on platforms such as openSUSE.