CVE-2019-6799

An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allow_local_infile PHP configuration, and the inadvertent ignoring of "options(MYSQLI_OPT_LOCAL_INFILE" calls.

• http://www.securityfocus.com/bid/106736Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2019/02/msg00039.htmlMailing List, Third Party Advisory
• https://www.phpmyadmin.net/security/PMASA-2019-1/Mitigation, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/106736Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2019/02/msg00039.htmlMailing List, Third Party Advisory
• https://www.phpmyadmin.net/security/PMASA-2019-1/Mitigation, Patch, Vendor Advisory

Published

Jan 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6793An issue was discovered in GitLab Enterprise Edition before …7
• CVE-2019-6794An issue was discovered in GitLab Community and Enterprise E…4.3
• CVE-2019-6795An issue was discovered in GitLab Community and Enterprise E…5.4
• CVE-2019-6796An issue was discovered in GitLab Community and Enterprise E…
• CVE-2019-6797An information disclosure issue was discovered in GitLab Ent…
• CVE-2019-6798An issue was discovered in phpMyAdmin before 4.8.5. A vulner…
• CVE-2019-6800In TitanHQ SpamTitan through 7.03, a vulnerability exists in…
• CVE-2019-6802CRLF Injection in pypiserver 1.2.5 and below allows attacker…
• CVE-2019-6803typora through 0.9.9.20.3 beta has XSS, with resultant remot…
• CVE-2019-6804An XSS issue was discovered on the Job Edit page in Rundeck …
• CVE-2019-6805SQL Injection was found in S-CMS version V3.0 via the alipay…
• CVE-2019-6806A CWE-200: Information Exposure vulnerability exists in all …7.5