Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phpmyadmin phpmyadmin 2.5.3 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2004-2631
Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote malicious users to execute arbitrary PHP code via a crafted table name.
Phpmyadmin Phpmyadmin 2.5.3Phpmyadmin Phpmyadmin 2.5.4Phpmyadmin Phpmyadmin 2.5.5Phpmyadmin Phpmyadmin 2.5.5 Pl1Phpmyadmin Phpmyadmin 2.5.5 Rc1Phpmyadmin Phpmyadmin 2.5.1Phpmyadmin Phpmyadmin 2.5.5 Rc2Phpmyadmin Phpmyadmin 2.5.6 Rc1Phpmyadmin Phpmyadmin 2.5.2Phpmyadmin Phpmyadmin 2.5.2 Pl1Phpmyadmin Phpmyadmin 2.5.6 Rc2Phpmyadmin Phpmyadmin 2.5.7
NA
CVE-2004-2632
phpMyAdmin 2.5.1 up to 2.5.7 allows remote malicious users to modify configuration settings and gain unauthorized access to MySQL servers via modified $cfg['Servers'] variables.
Phpmyadmin Phpmyadmin 2.5.1Phpmyadmin Phpmyadmin 2.5.5 Rc1Phpmyadmin Phpmyadmin 2.5.5 Rc2Phpmyadmin Phpmyadmin 2.5.2Phpmyadmin Phpmyadmin 2.5.2 Pl1Phpmyadmin Phpmyadmin 2.5.6 Rc1Phpmyadmin Phpmyadmin 2.5.6 Rc2Phpmyadmin Phpmyadmin 2.5.3Phpmyadmin Phpmyadmin 2.5.4Phpmyadmin Phpmyadmin 2.5.7Phpmyadmin Phpmyadmin 2.5.5Phpmyadmin Phpmyadmin 2.5.5 Pl1
NA
CVE-2005-3621
CRLF injection vulnerability in phpMyAdmin prior to 2.6.4-pl4 allows remote malicious users to conduct HTTP response splitting attacks via unspecified scripts.
Phpmyadmin Phpmyadmin 2.5.3Phpmyadmin Phpmyadmin 2.5.5 Pl1Phpmyadmin Phpmyadmin 2.6.4 Pl3Phpmyadmin Phpmyadmin 2.2.0Phpmyadmin Phpmyadmin 2.2.7 Pl1Phpmyadmin Phpmyadmin 2.5.2 Pl1Phpmyadmin Phpmyadmin 2.5.7 Pl1Phpmyadmin Phpmyadmin 2.6.0 Pl3Phpmyadmin Phpmyadmin 2.6.1 Pl3Phpmyadmin Phpmyadmin 2.6.2 Pl1Phpmyadmin Phpmyadmin 2.5.4Phpmyadmin Phpmyadmin 2.5.6 Rc2Phpmyadmin Phpmyadmin 2.6.3 Pl1
NA
CVE-2005-3787
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin prior to 2.6.4-pl4 allow remote malicious users to inject arbitrary web script or HTML via (1) the cookie-based login panel, (2) the title parameter and (3) the table creation dialog.
Phpmyadmin Phpmyadmin 2.5.4Phpmyadmin Phpmyadmin 2.5.5 Pl1Phpmyadmin Phpmyadmin 2.6.4 Pl3Phpmyadmin Phpmyadmin 2.5.6 Rc2Phpmyadmin Phpmyadmin 2.5.7 Pl1Phpmyadmin Phpmyadmin 2.5.2 Pl1Phpmyadmin Phpmyadmin 2.5.3Phpmyadmin Phpmyadmin 2.6.2 Pl1Phpmyadmin Phpmyadmin 2.6.3 Pl1Phpmyadmin Phpmyadmin 2.2.0Phpmyadmin Phpmyadmin 2.2.7 Pl1Phpmyadmin Phpmyadmin 2.6.0 Pl3Phpmyadmin Phpmyadmin 2.6.1 Pl3
NA
CVE-2004-2630
The MIME transformation system (transformations/text_plain__external.inc.php) in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows remote malicious users to execute arbitrary commands via shell metacharacters in unspecified vectors.
Phpmyadmin Phpmyadmin 2.5.2 Pl1Phpmyadmin Phpmyadmin 2.5.3Phpmyadmin Phpmyadmin 2.5.6 Rc2Phpmyadmin Phpmyadmin 2.5.7Phpmyadmin Phpmyadmin 2.5.4Phpmyadmin Phpmyadmin 2.5.5Phpmyadmin Phpmyadmin 2.5.7 Pl1Phpmyadmin Phpmyadmin 2.6.0 Pl1Phpmyadmin Phpmyadmin 2.5.0Phpmyadmin Phpmyadmin 2.5.5 Pl1Phpmyadmin Phpmyadmin 2.5.5 Rc1Phpmyadmin Phpmyadmin 2.5.1Phpmyadmin Phpmyadmin 2.5.2Phpmyadmin Phpmyadmin 2.5.5 Rc2Phpmyadmin Phpmyadmin 2.5.6 Rc1
NA
CVE-2005-3622
phpMyAdmin 2.7.0-beta1 and previous versions allows remote malicious users to obtain the full path of the server via direct requests to multiple scripts in the libraries directory.
Phpmyadmin Phpmyadmin 2.5.6 Rc2Phpmyadmin Phpmyadmin 2.5.7 Pl1Phpmyadmin Phpmyadmin 2.2.0Phpmyadmin Phpmyadmin 2.2.7 Pl1Phpmyadmin Phpmyadmin 2.6.0 Pl3Phpmyadmin Phpmyadmin 2.6.1 Pl3Phpmyadmin Phpmyadmin 2.5.4Phpmyadmin Phpmyadmin 2.5.5 Pl1Phpmyadmin Phpmyadmin 2.6.4 Pl4Phpmyadmin Phpmyadmin 2.7.0 Beta1Phpmyadmin Phpmyadmin 2.5.2 Pl1Phpmyadmin Phpmyadmin 2.5.3Phpmyadmin Phpmyadmin 2.6.2 Pl1Phpmyadmin Phpmyadmin 2.6.3 Pl1Phpmyadmin Phpmyadmin 2.6.4 Pl3
NA
CVE-2005-0992
Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin prior to 2.6.2-rc1 allows remote malicious users to inject arbitrary web script or HTML via the convcharset parameter.
Phpmyadmin Phpmyadmin 2.0.5Phpmyadmin Phpmyadmin 2.1Phpmyadmin Phpmyadmin 2.2.5Phpmyadmin Phpmyadmin 2.2.6Phpmyadmin Phpmyadmin 2.4.0Phpmyadmin Phpmyadmin 2.5.0Phpmyadmin Phpmyadmin 2.5.5 Rc1Phpmyadmin Phpmyadmin 2.5.5 Rc2Phpmyadmin Phpmyadmin 2.6.1Phpmyadmin Phpmyadmin 2.0.1Phpmyadmin Phpmyadmin 2.0.2Phpmyadmin Phpmyadmin 2.2Phpmyadmin Phpmyadmin 2.2.2Phpmyadmin Phpmyadmin 2.2 Rc1Phpmyadmin Phpmyadmin 2.2 Rc2Phpmyadmin Phpmyadmin 2.2 Rc3Phpmyadmin Phpmyadmin 2.5.3Phpmyadmin Phpmyadmin 2.5.4Phpmyadmin Phpmyadmin 2.5.7 Pl1Phpmyadmin Phpmyadmin 2.6.0 Pl1Phpmyadmin Phpmyadmin 2.0Phpmyadmin Phpmyadmin 2.1.1
NA
CVE-2005-2869
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin prior to 2.6.4 allow remote malicious users to inject arbitrary web script or HTML via (1) the Username to libraries/auth/cookie.auth.lib.php or (2) the error parameter to error.php.
Phpmyadmin Phpmyadmin 2.2.2Phpmyadmin Phpmyadmin 2.2.3Phpmyadmin Phpmyadmin 2.2.4Phpmyadmin Phpmyadmin 2.2.5Phpmyadmin Phpmyadmin 2.5.4Phpmyadmin Phpmyadmin 2.5.5Phpmyadmin Phpmyadmin 2.5.5 Pl1Phpmyadmin Phpmyadmin 2.5.5 Rc1Phpmyadmin Phpmyadmin 2.6.2 Pl1Phpmyadmin Phpmyadmin 2.6.3Phpmyadmin Phpmyadmin 2.6.3 Pl1Phpmyadmin Phpmyadmin 2.0.2Phpmyadmin Phpmyadmin 2.0.3Phpmyadmin Phpmyadmin 2.0.4Phpmyadmin Phpmyadmin 2.0.5Phpmyadmin Phpmyadmin 2.2 Rc2Phpmyadmin Phpmyadmin 2.2 Rc3Phpmyadmin Phpmyadmin 2.3.1Phpmyadmin Phpmyadmin 2.3.2Phpmyadmin Phpmyadmin 2.4.0Phpmyadmin Phpmyadmin 2.6.0 Pl1Phpmyadmin Phpmyadmin 2.6.0 Pl2
NA
CVE-2005-3665
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin prior to 2.7.0 allow remote malicious users to inject arbitrary web script or HTML via the (1) HTTP_HOST variable and (2) various scripts in the libraries directory that handle header generation.
Phpmyadmin Phpmyadmin 2.0Phpmyadmin Phpmyadmin 2.1.2Phpmyadmin Phpmyadmin 2.2Phpmyadmin Phpmyadmin 2.2 Pre2Phpmyadmin Phpmyadmin 2.2 Rc1Phpmyadmin Phpmyadmin 2.5.1Phpmyadmin Phpmyadmin 2.5.2Phpmyadmin Phpmyadmin 2.5.7Phpmyadmin Phpmyadmin 2.5.7 Pl1Phpmyadmin Phpmyadmin 2.6.1 Rc1Phpmyadmin Phpmyadmin 2.6.2Phpmyadmin Phpmyadmin 2.0.3Phpmyadmin Phpmyadmin 2.0.4Phpmyadmin Phpmyadmin 2.0.5Phpmyadmin Phpmyadmin 2.2.4Phpmyadmin Phpmyadmin 2.2.5Phpmyadmin Phpmyadmin 2.3.1Phpmyadmin Phpmyadmin 2.3.2Phpmyadmin Phpmyadmin 2.5.5 Pl1Phpmyadmin Phpmyadmin 2.5.5 Rc1Phpmyadmin Phpmyadmin 2.6.0 Pl3Phpmyadmin Phpmyadmin 2.6.1
NA
CVE-2006-3388
Cross-site scripting (XSS) vulnerability in phpMyAdmin prior to 2.8.2 allows remote malicious users to inject arbitrary web script or HTML via the table parameter.
Phpmyadmin Phpmyadmin 2.0.1Phpmyadmin Phpmyadmin 2.0.2Phpmyadmin Phpmyadmin 2.2Phpmyadmin Phpmyadmin 2.2.2Phpmyadmin Phpmyadmin 2.2 Rc1Phpmyadmin Phpmyadmin 2.0.5Phpmyadmin Phpmyadmin 2.1Phpmyadmin Phpmyadmin 2.2.5Phpmyadmin Phpmyadmin 2.2.6Phpmyadmin Phpmyadmin 2.3.2Phpmyadmin Phpmyadmin 2.4.0Phpmyadmin Phpmyadmin 2.5.5 Rc1Phpmyadmin Phpmyadmin 2.5.5 Rc2Phpmyadmin Phpmyadmin 2.6.1Phpmyadmin Phpmyadmin 2.6.1 Pl1Phpmyadmin Phpmyadmin 2.6.4 Pl3Phpmyadmin Phpmyadmin 2.6.4 Pl4Phpmyadmin Phpmyadmin 2.6.4 Rc1Phpmyadmin Phpmyadmin 2.2 Rc2Phpmyadmin Phpmyadmin 2.5.3Phpmyadmin Phpmyadmin 2.5.4Phpmyadmin Phpmyadmin 2.5.7 Pl1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook