CVE-2016-5706: High severity phpmyadmin vulnerability
Published Jul 3, 2016
·Updated
js/getscripts.js.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to cause a denial of service via a large array in the scripts parameter.
Affected Software
65 affected componentsFixes available
phpMyAdmin phpMyAdmin=4.6.0
phpMyAdmin phpMyAdmin=4.6.0-alpha1
phpMyAdmin phpMyAdmin=4.6.0-rc1
phpMyAdmin phpMyAdmin=4.6.0-rc2
phpMyAdmin phpMyAdmin=4.6.1
phpMyAdmin phpMyAdmin=4.6.2
phpMyAdmin phpMyAdmin=4.4.0
phpMyAdmin phpMyAdmin=4.4.1
phpMyAdmin phpMyAdmin=4.4.1.1
phpMyAdmin phpMyAdmin=4.4.2
phpMyAdmin phpMyAdmin=4.4.3
phpMyAdmin phpMyAdmin=4.4.4
phpMyAdmin phpMyAdmin=4.4.5
phpMyAdmin phpMyAdmin=4.4.6
phpMyAdmin phpMyAdmin=4.4.6.1
phpMyAdmin phpMyAdmin=4.4.7
phpMyAdmin phpMyAdmin=4.4.8
phpMyAdmin phpMyAdmin=4.4.9
phpMyAdmin phpMyAdmin=4.4.10
phpMyAdmin phpMyAdmin=4.4.11
phpMyAdmin phpMyAdmin=4.4.12
phpMyAdmin phpMyAdmin=4.4.13
phpMyAdmin phpMyAdmin=4.4.13.1
phpMyAdmin phpMyAdmin=4.4.14.1
phpMyAdmin phpMyAdmin=4.4.15
phpMyAdmin phpMyAdmin=4.4.15.1
phpMyAdmin phpMyAdmin=4.4.15.2
phpMyAdmin phpMyAdmin=4.4.15.3
phpMyAdmin phpMyAdmin=4.4.15.4
phpMyAdmin phpMyAdmin=4.4.15.5
phpMyAdmin phpMyAdmin=4.4.15.6
phpMyAdmin phpMyAdmin=4.0.0
phpMyAdmin phpMyAdmin=4.0.1
phpMyAdmin phpMyAdmin=4.0.2
phpMyAdmin phpMyAdmin=4.0.3
phpMyAdmin phpMyAdmin=4.0.4
phpMyAdmin phpMyAdmin=4.0.4.1
phpMyAdmin phpMyAdmin=4.0.4.2
phpMyAdmin phpMyAdmin=4.0.5
phpMyAdmin phpMyAdmin=4.0.6
phpMyAdmin phpMyAdmin=4.0.7
phpMyAdmin phpMyAdmin=4.0.8
phpMyAdmin phpMyAdmin=4.0.9
phpMyAdmin phpMyAdmin=4.0.10
phpMyAdmin phpMyAdmin=4.0.10.1
phpMyAdmin phpMyAdmin=4.0.10.2
phpMyAdmin phpMyAdmin=4.0.10.3
phpMyAdmin phpMyAdmin=4.0.10.4
phpMyAdmin phpMyAdmin=4.0.10.5
phpMyAdmin phpMyAdmin=4.0.10.6
phpMyAdmin phpMyAdmin=4.0.10.7
phpMyAdmin phpMyAdmin=4.0.10.8
phpMyAdmin phpMyAdmin=4.0.10.9
phpMyAdmin phpMyAdmin=4.0.10.10
phpMyAdmin phpMyAdmin=4.0.10.11
phpMyAdmin phpMyAdmin=4.0.10.12
phpMyAdmin phpMyAdmin=4.0.10.13
phpMyAdmin phpMyAdmin=4.0.10.14
phpMyAdmin phpMyAdmin=4.0.10.15
openSUSE Leap=42.1
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
composer/phpmyadmin/phpmyadmin>=4.6<4.6.3
4.6.3
composer/phpmyadmin/phpmyadmin>=4.4<4.4.15.7
4.4.15.7
composer/phpmyadmin/phpmyadmin>=4.0<4.0.10.16
4.0.10.16
Remediation
Patch Available
Event History
Jul 3, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
May 14, 2022
Advisory Published
via GitHub·02:08 AM
Frequently Asked Questions
1
What is the severity of CVE-2016-5706?
CVE-2016-5706 has high severity as it allows remote attackers to cause a denial of service.
2
How do I fix CVE-2016-5706?
To fix CVE-2016-5706, upgrade phpMyAdmin to version 4.0.10.16, 4.4.15.7 or 4.6.3 or later.
3
Which versions of phpMyAdmin are affected by CVE-2016-5706?
CVE-2016-5706 affects phpMyAdmin versions 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3.
4
What type of attack does CVE-2016-5706 involve?
CVE-2016-5706 involves remote denial of service attacks via a large array in the scripts parameter.
5
Is my phpMyAdmin installation at risk due to CVE-2016-5706?
If you are using an affected version of phpMyAdmin prior to the fixed versions, your installation is at risk from CVE-2016-5706.