vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2016-5734

N/A
Published: July 3, 2016 at 01:00 AM UTC
Updated: June 17, 2026 at 12:49 AM UTC
1 product affected across 1 vendorphpMyAdmin

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 81%

Description

phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the preg_replace e (aka eval) modifier, which might allow remote attackers to execute arbitrary PHP code via a crafted string, as demonstrated by the table search-and-replace implementation.

References (6)

VDB Entryx_refsource_BID
Source: [email protected]
http://www.securityfocus.com/bid/91387
x_refsource_CONFIRMPatch
Source: [email protected]
https://github.com/phpmyadmin/phpmyadmin/commit/1cc7466db3a05e95fe57a6702f41773e6829d54b
x_refsource_CONFIRMPatch
Source: [email protected]
https://github.com/phpmyadmin/phpmyadmin/commit/4bcc606225f15bac0b07780e74f667f6ac283da7
Vendor Advisoryx_refsource_GENTOO
Source: [email protected]
https://security.gentoo.org/glsa/201701-32
Exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry
Source: [email protected]
https://www.exploit-db.com/exploits/40185/
x_refsource_CONFIRMPatchVendor Advisory
Source: [email protected]
https://www.phpmyadmin.net/security/PMASA-2016-27/

CVSS

7.5HIGH[email protected]
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-94

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card