phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the preg_replace e (aka eval) modifier, which might allow remote attackers to execute arbitrary PHP code via a crafted string, as demonstrated by the table search-and-replace implementation.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2016-07-03T01:00:00
Updated: 2024-08-06T01:08:00.523Z
Reserved: 2016-06-21T00:00:00
Link: CVE-2016-5734
Vulnrichment
No data.
NVD
Status : Modified
Published: 2016-07-03T01:59:24.753
Modified: 2024-11-21T02:54:55.190
Link: CVE-2016-5734
Redhat
No data.