CVE-2017-1000017

Description

phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server

Affected packages (2)

• Debian/phpmyadminfrom 0, < 4:4.6.6-1
• Packagist/phpmyadmin/phpmyadmin>= 4.6, < 4.6.6

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2017-1000017
• ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2017-1000017
• PATCHhttps://github.com/phpmyadmin/composer
• WEBhttps://www.phpmyadmin.net/security/PMASA-2017-6
• WEBhttp://www.securityfocus.com/bid/95732