CVE-2016-9862: Code Injection
An issue was discovered in phpMyAdmin. With a crafted login request it is possible to inject BBCode in the login page. All 4.6.x versions (prior to 4.6.5) are affected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/phpmyadminto a version that resolves this vulnerability.Fixed in 4.6.5.2-r0 - Upgrade
Upgrade
phpMyAdminto a version that resolves this vulnerability.Fixed in 4.6.5
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9862?
CVE-2016-9862 is considered a moderate severity vulnerability due to the potential for script injection via crafted login requests.
How do I fix CVE-2016-9862?
To fix CVE-2016-9862, upgrade phpMyAdmin to version 4.6.5 or later.
What versions of phpMyAdmin are affected by CVE-2016-9862?
CVE-2016-9862 affects all phpMyAdmin versions from 4.6.0 to 4.6.4.
Can CVE-2016-9862 be exploited remotely?
Yes, CVE-2016-9862 can be exploited remotely as it involves a vulnerability in the login page.
Is CVE-2016-9862 still a concern today?
While the immediate risk is mitigated by upgrading, it is important to keep software updated to avoid similar vulnerabilities.