-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| phpmyadmin/phpmyadmin | composer | >= 4.8, < 4.8.5 | 4.8.5 |
Miggo AIRoot Cause AnalysisThe vulnerability arises from two key factors: 1) phpMyAdmin's configuration (AllowArbitraryServer) enabling connections to arbitrary MySQL servers, and 2) PHP's failure to honor the MYSQLI_OPT_LOCAL_INFILE option. The functions responsible for MySQL connection setup (mysqli_real_connect) and security configuration (mysqli_options) are directly involved. Despite phpMyAdmin's attempt to disable local file access via mysqli_options, the PHP bug allows the option to be ignored, making these functions critical points of failure. The high confidence stems from the explicit linkage between these functions and the vulnerability mechanics described in advisories.