CVE-2016-6610: phpMyAdmin

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a particular error in the export mechanism to discover the full path of phpMyAdmin on the disk. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

Affected products

• phpMyAdmin phpMyAdmin: version 4.4.0 only; version 4.4.1 only; version 4.4.1.1 only; version 4.4.2 only; version 4.4.3 only; version 4.4.4 only; …

Published 2016-12-11. Last modified 2026-06-17.