CVE-2016-6608: phpMyAdmin

Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days.

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions (prior to 4.6.4) are affected.

Affected products

• phpMyAdmin phpMyAdmin: version 4.6.0 only; version 4.6.1 only; version 4.6.2 only; version 4.6.3 only

Published 2016-12-11. Last modified 2026-06-17.