{"id":"CVE-2016-6632","aliases":["GHSA-426q-975p-w5cr"],"url":"https://o3.security/vulnerability/CVE-2016-6632","summary":"phpMyAdmin Denial of service (DOS) attack with dbase extension","details":"An issue was discovered in phpMyAdmin where, under certain conditions, phpMyAdmin may not delete temporary files during the import of ESRI files. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.","published":"2016-12-11T02:59:41.863Z","modified":"2026-07-08T12:54:18.188664Z","cvss":{"score":5.9,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"phpmyadmin/phpmyadmin","fixedVersion":"4.6.4"},{"ecosystem":"Packagist","name":"phpmyadmin/phpmyadmin","fixedVersion":"4.4.15.8"},{"ecosystem":"Packagist","name":"phpmyadmin/phpmyadmin","fixedVersion":"4.0.10.17"}],"fix":null,"references":[{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/92497"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201701-32"},{"type":"FIX","url":"https://www.phpmyadmin.net/security/PMASA-2016-55"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T12:54:18.188664Z"}}