-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper handling of transformation parameters in phpMyAdmin's display logic. The provided security advisory (PMASA-2016-41) explicitly links the DoS vulnerability to the transformation feature and references commits that patched parameter validation. Key functions involved in transformation processing (PMA_apply_transformation for applying transformations and getTransformationParameters for parsing inputs) would be the logical points of vulnerability, as they directly handle user-controllable parameters that could trigger resource exhaustion. The CWE-661 (Insufficient Resource Pool) classification confirms this pattern of missing resource limits in transformation handling.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| phpmyadmin/phpmyadmin | composer | >= 4.6, < 4.6.4 | 4.6.4 |
| phpmyadmin/phpmyadmin | composer | >= 4.4, < 4.4.15.8 | 4.4.15.8 |
| phpmyadmin/phpmyadmin | composer | >= 4.0, < 4.0.10.17 | 4.0.10.17 |
PHPPHPOngoing coverage of React2Shell