QwikSec

Security Database

CVE

CWE

Training

CVE-2019-6799

Published: Jan 26, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allow_local_infile PHP configuration, and the inadvertent ignoring of "options(MYSQLI_OPT_LOCAL_INFILE" calls.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.phpmyadmin.net/security/PMASA-2019-1/

x_refsource_CONFIRM

[debian-lts-announce] 20190227 [SECURITY] [DLA 1692-1] phpmyadmin security update

mailing-list

x_refsource_MLIST

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.