FreeBSD: VID-ef70b201-645d-11e6-9cdc-6805ca0b3d42 (CVE-2016-6619): phpmyadmin -- multiple vulnerabilities

The phpmyadmin development team reports: Weakness with cookie encryption Multiple XSS vulnerabilities Multiple XSS vulnerabilities PHP code injection Full path disclosure SQL injection attack Local file exposure Local file exposure through symlinks with UploadDir Path traversal with SaveDir and UploadDir Multiple XSS vulnerabilities SQL injection attack SQL injection attack Denial of service (DOS) attack in transformation feature SQL injection attack as control user Unvalidated data passed to unserialize() DOS attack with forced persistent connections Denial of service (DOS) attack by for loops IPv6 and proxy server IP-based authentication rule circumvention Detect if user is logged in Bypass URL redirect protection Referrer leak in url.php Reflected File Download attack ArbitraryServerRegexp bypass Denial of service (DOS) attack by changing password to a very long string Remote code execution vulnerability when run as CGI Summary Denial of service (DOS) attack with dbase extension Remote code execution vulnerability when PHP is running with dbase extension