CVE-2016-5705: XSS
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) server-privileges certificate data fields on the user privileges page, (2) an "invalid JSON" error message in the error console, (3) a database name in the central columns implementation, (4) a group name, or (5) a search name in the bookmarks implementation.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5705?
The severity of CVE-2016-5705 is generally considered high due to its potential for remote code execution via cross-site scripting (XSS).
How do I fix CVE-2016-5705?
To fix CVE-2016-5705, you should upgrade phpMyAdmin to version 4.4.15.7 or 4.6.3 or later, which contains the necessary patches.
What types of vulnerabilities are associated with CVE-2016-5705?
CVE-2016-5705 is associated with multiple cross-site scripting (XSS) vulnerabilities allowing arbitrary web script or HTML injection.
Which versions of phpMyAdmin are affected by CVE-2016-5705?
phpMyAdmin versions 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 are affected by CVE-2016-5705.
Can CVE-2016-5705 be exploited remotely?
Yes, CVE-2016-5705 can be exploited remotely by attackers to inject malicious scripts into vulnerable phpMyAdmin installations.