CVE-2016-5703

Critical

Published: 03/07/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In phpMyAdmin versions 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3, there is an SQL injection vulnerability in libraries/central_columns.lib.php. Remote attackers can execute arbitrary SQL commands via a crafted database name that is mishandled in a central column query.

Risk Assessment

This vulnerability could lead to unauthorized access to database data, posing a serious threat to the integrity and confidentiality of information within the organization.

Recommendation

It is recommended to update phpMyAdmin to the latest version to eliminate this vulnerability and to conduct a security audit of the databases.

Original NVD description (English source)

SQL injection vulnerability in libraries/central_columns.lib.php in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allows remote attackers to execute arbitrary SQL commands via a crafted database name that is mishandled in a central column query.