High severity8.8NVD Advisory· Published Jul 17, 2017· Updated May 13, 2026
CVE-2017-1000017
CVE-2017-1000017
Description
phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
phpmyadmin/phpmyadminPackagist | >= 4.6, < 4.6.6 | 4.6.6 |
phpmyadmin/phpmyadminPackagist | >= 4.4, < 4.4.15.10 | 4.4.15.10 |
phpmyadmin/phpmyadminPackagist | >= 4.0, < 4.0.10.19 | 4.0.10.19 |
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.securityfocus.com/bid/95732nvdThird Party AdvisoryVDB EntryWEB
- github.com/advisories/GHSA-99xj-xqc9-98hrghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2017-1000017ghsaADVISORY
- www.phpmyadmin.net/security/PMASA-2017-6nvdVendor AdvisoryWEB
News mentions
0No linked articles in our index yet.