phpMyAdmin Local file exposure vulnerability in phpmyadmin/phpmyadmin
Summary
CVE-2016-6612: phpMyAdmin Local file exposure. Affects phpmyadmin/phpmyadmin across 3 version ranges.
>= 4.0, < 4.0.10.17
>= 4.4, < 4.4.15.8
>= 4.6, < 4.6.4
Fixed in 4.0.10.17, 4.4.15.8 or 4.6.4, depending on the release line you run. How to fix ↓
Also tracked for
- phpmyadmin · Alpine:v3.2
The same CVE-2016-6612 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpMyAdmin is a popular open-source tool written in PHP that is used for managing MySQL and MariaDB databases. It provides a web-based interface for performing various database administration tasks such as creating, modifying, and deleting databases, tables, and records. The vulnerability in phpMyAdmin allows an attacker to exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. This functionality is used to load data from a local file into a database table. The vulnerability affects multiple versions of phpMyAdmin, including 4.6.x (prior to 4.6.4), 4.4.x (prior to 4.4.15.8), and 4.0.x (prior to 4.0.10.17).
Vulnerability Detail
The vulnerability in phpMyAdmin arises from the insecure usage of the LOAD LOCAL INFILE functionality. An attacker can leverage this functionality to read arbitrary files on the server by crafting a malicious SQL query. By exploiting this vulnerability, an attacker can gain unauthorized access to sensitive files, potentially exposing sensitive information or executing arbitrary code. The vulnerability has a CVSS score of 6.5, indicating a moderate severity level.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 4.0, < 4.0.10.174.0.10.17composer require phpmyadmin/phpmyadmin:4.0.10.17 -
>= 4.4, < 4.4.15.84.4.15.8composer require phpmyadmin/phpmyadmin:4.4.15.8 -
>= 4.6, < 4.6.44.6.4composer require phpmyadmin/phpmyadmin:4.6.4
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
If updating phpMyAdmin is not immediately feasible, a temporary workaround is to disable the LOAD LOCAL INFILE functionality. This can be done by modifying the phpMyAdmin configuration file (config.inc.php) and setting the 'AllowUserDropDatabase' option to 'false'. However, this workaround may impact legitimate use cases that rely on the functionality, so updating to the latest version is still recommended.
Conclusion
The phpMyAdmin Local file exposure vulnerability allows an attacker to read arbitrary files on the server by exploiting the insecure usage of the LOAD LOCAL INFILE functionality. To mitigate this vulnerability, it is crucial to update phpMyAdmin to the latest version. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for phpmyadmin/phpmyadmin →
FAQ
phpMyAdmin is an open-source tool used for managing MySQL and MariaDB databases. It provides a web-based interface for performing various database administration tasks.
The LOAD LOCAL INFILE functionality in phpMyAdmin allows loading data from a local file into a database table.
The vulnerability allows an attacker to exploit the LOAD LOCAL INFILE functionality to read arbitrary files on the server by crafting a malicious SQL query.
By exploiting this vulnerability, an attacker can gain unauthorized access to sensitive files, potentially exposing sensitive information or executing arbitrary code.
To fix this vulnerability, update phpMyAdmin to the latest version available (4.6.4, 4.4.15.8, or 4.0.10.17).
Related vulnerabilities
Recent vulnerabilities recorded for phpmyadmin/phpmyadmin.
