CVE-2016-9863

HIGH

Phpmyadmin < 4.6.5 - Improper Input Validation

Title source: rule

Description

An issue was discovered in phpMyAdmin. With a very large request to table partitioning function, it is possible to invoke a Denial of Service (DoS) attack. All 4.6.x versions (prior to 4.6.5) are affected.

References (3)

[Patch, Vendor Advisory] https://www.phpmyadmin.net/security/PMASA-2016-68

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/94526

[Third Party Advisory] https://security.gentoo.org/glsa/201701-32

Scores

CVSS v3 7.5

EPSS 0.0060

EPSS Percentile 69.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-20

Status draft

Affected Products (6)

phpmyadmin/phpmyadmin

phpmyadmin/phpmyadmin < 4.6.5Packagist

Timeline

Published Dec 11, 2016

Tracked Since Feb 18, 2026