-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper handling of MySQL's LOAD LOCAL INFILE command. phpMyAdmin's security advisory and commit patches indicate the fix involved adding MYSQLI_OPT_LOCAL_INFILE=false in database connection logic. The core issue was the absence of this security flag in mysqli_real_connect calls, which left the local file loading capability enabled by default. This function is directly responsible for MySQL connection parameters, making it the clear attack surface.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| phpmyadmin/phpmyadmin | composer | >= 4.6, < 4.6.4 | 4.6.4 |
| phpmyadmin/phpmyadmin | composer | >= 4.4, < 4.4.15.8 | 4.4.15.8 |
| phpmyadmin/phpmyadmin | composer | >= 4.0, < 4.0.10.17 | 4.0.10.17 |