This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2016-6616 →
DEBIAN-CVE-2016-6616
An issue was discovered in phpMyAdmin. In the "User group" and "Designer" features, a user can execute an SQL injection attack against the account of...
Original description
The description as published by the source.
An issue was discovered in phpMyAdmin. In the "User group" and "Designer" features, a user can execute an SQL injection attack against the account of the control user. All 4.6.x versions (prior to 4.6.4) and 4.4.x versions (prior to 4.4.15.8) are affected.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
phpmyadmin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.6.4+dfsg1-1"}]}]
Debian:13
phpmyadmin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.6.4+dfsg1-1"}]}]
Debian:14
phpmyadmin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.6.4+dfsg1-1"}]}]
References
- advisory security-tracker.debian.org