Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

phpmyadmin phpmyadmin 2.6.0 pl1 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2004-1147
phpMyAdmin 2.6.0-pl2, and other versions prior to 2.6.1, with external transformations enabled, allows remote malicious users to execute arbitrary commands via shell metacharacters.
Phpmyadmin Phpmyadmin 2.5.0Phpmyadmin Phpmyadmin 2.5.5 Rc1Phpmyadmin Phpmyadmin 2.6.0 Pl3Phpmyadmin Phpmyadmin 2.5.7 Pl1Phpmyadmin Phpmyadmin 2.4.0Phpmyadmin Phpmyadmin 2.5.5Phpmyadmin Phpmyadmin 2.5.7Phpmyadmin Phpmyadmin 2.5.6 Rc1Phpmyadmin Phpmyadmin 2.6.0 Pl1Phpmyadmin Phpmyadmin 2.5.2Phpmyadmin Phpmyadmin 2.5.1Phpmyadmin Phpmyadmin 2.6.0 Pl2Phpmyadmin Phpmyadmin 2.5.4Phpmyadmin Phpmyadmin 2.5.5 Rc2Phpmyadmin Phpmyadmin 2.5.5 Pl1
5
CVSSv2
CVE-2004-1148
phpMyAdmin prior to 2.6.1, when configured with UploadDir functionality, allows remote malicious users to read arbitrary files via the sql_localfile parameter.
Phpmyadmin Phpmyadmin 2.5.0Phpmyadmin Phpmyadmin 2.5.5 Rc1Phpmyadmin Phpmyadmin 2.6.0 Pl3Phpmyadmin Phpmyadmin 2.5.7 Pl1Phpmyadmin Phpmyadmin 2.4.0Phpmyadmin Phpmyadmin 2.5.5Phpmyadmin Phpmyadmin 2.5.7Phpmyadmin Phpmyadmin 2.5.6 Rc1Phpmyadmin Phpmyadmin 2.6.0 Pl1Phpmyadmin Phpmyadmin 2.5.2Phpmyadmin Phpmyadmin 2.5.1Phpmyadmin Phpmyadmin 2.6.0 Pl2Phpmyadmin Phpmyadmin 2.5.4Phpmyadmin Phpmyadmin 2.5.5 Rc2Phpmyadmin Phpmyadmin 2.5.5 Pl1
4.3
CVSSv2
CVE-2005-3787
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin prior to 2.6.4-pl4 allow remote malicious users to inject arbitrary web script or HTML via (1) the cookie-based login panel, (2) the title parameter and (3) the table creation dialog.
Phpmyadmin Phpmyadmin 2.5.2 Pl1Phpmyadmin Phpmyadmin 2.6.2 Pl1Phpmyadmin Phpmyadmin 2.6.1 Pl3Phpmyadmin Phpmyadmin 2.6.0 Pl3Phpmyadmin Phpmyadmin 2.5.7 Pl1Phpmyadmin Phpmyadmin 2.6.4 Pl3Phpmyadmin Phpmyadmin 2.5.4Phpmyadmin Phpmyadmin 2.5.3Phpmyadmin Phpmyadmin 2.5.6 Rc2Phpmyadmin Phpmyadmin 2.2.0Phpmyadmin Phpmyadmin 2.2.7 Pl1Phpmyadmin Phpmyadmin 2.6.3 Pl1Phpmyadmin Phpmyadmin 2.5.5 Pl1
5
CVSSv2
CVE-2005-3621
CRLF injection vulnerability in phpMyAdmin prior to 2.6.4-pl4 allows remote malicious users to conduct HTTP response splitting attacks via unspecified scripts.
Phpmyadmin Phpmyadmin 2.5.2 Pl1Phpmyadmin Phpmyadmin 2.6.2 Pl1Phpmyadmin Phpmyadmin 2.6.1 Pl3Phpmyadmin Phpmyadmin 2.6.0 Pl3Phpmyadmin Phpmyadmin 2.5.7 Pl1Phpmyadmin Phpmyadmin 2.6.4 Pl3Phpmyadmin Phpmyadmin 2.5.4Phpmyadmin Phpmyadmin 2.5.3Phpmyadmin Phpmyadmin 2.5.6 Rc2Phpmyadmin Phpmyadmin 2.2.0Phpmyadmin Phpmyadmin 2.2.7 Pl1Phpmyadmin Phpmyadmin 2.6.3 Pl1Phpmyadmin Phpmyadmin 2.5.5 Pl1
6.8
CVSSv2
CVE-2004-1055
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and previous versions allow remote malicious users to inject arbitrary web script or HTML via (1) the PmaAbsoluteUri parameter, (2) the zero_rows parameter in read_dump.php, (3) the confirm form, or (4) a...
Phpmyadmin Phpmyadmin 2.5.0Phpmyadmin Phpmyadmin 2.5.5 Rc1Phpmyadmin Phpmyadmin 2.5.7 Pl1Phpmyadmin Phpmyadmin 2.5.5Phpmyadmin Phpmyadmin 2.5.7Phpmyadmin Phpmyadmin 2.5.6 Rc1Phpmyadmin Phpmyadmin 2.6.0 Pl1Phpmyadmin Phpmyadmin 2.5.2Phpmyadmin Phpmyadmin 2.5.1Phpmyadmin Phpmyadmin 2.6.0 Pl2Phpmyadmin Phpmyadmin 2.5.4Phpmyadmin Phpmyadmin 2.5.5 Rc2Phpmyadmin Phpmyadmin 2.5.5 Pl1Gentoo Linux 1.4
5
CVSSv2
CVE-2005-3622
phpMyAdmin 2.7.0-beta1 and previous versions allows remote malicious users to obtain the full path of the server via direct requests to multiple scripts in the libraries directory.
Phpmyadmin Phpmyadmin 2.5.2 Pl1Phpmyadmin Phpmyadmin 2.6.2 Pl1Phpmyadmin Phpmyadmin 2.6.1 Pl3Phpmyadmin Phpmyadmin 2.6.0 Pl3Phpmyadmin Phpmyadmin 2.5.7 Pl1Phpmyadmin Phpmyadmin 2.6.4 Pl3Phpmyadmin Phpmyadmin 2.5.4Phpmyadmin Phpmyadmin 2.5.3Phpmyadmin Phpmyadmin 2.6.4 Pl4Phpmyadmin Phpmyadmin 2.5.6 Rc2Phpmyadmin Phpmyadmin 2.2.0Phpmyadmin Phpmyadmin 2.2.7 Pl1Phpmyadmin Phpmyadmin 2.6.3 Pl1Phpmyadmin Phpmyadmin 2.7.0 Beta1Phpmyadmin Phpmyadmin 2.5.5 Pl1
7.5
CVSSv2
CVE-2004-2630
The MIME transformation system (transformations/text_plain__external.inc.php) in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows remote malicious users to execute arbitrary commands via shell metacharacters in unspecified vectors.
Phpmyadmin Phpmyadmin 2.5.2 Pl1Phpmyadmin Phpmyadmin 2.5.0Phpmyadmin Phpmyadmin 2.5.5 Rc1Phpmyadmin Phpmyadmin 2.5.7 Pl1Phpmyadmin Phpmyadmin 2.5.5Phpmyadmin Phpmyadmin 2.5.7Phpmyadmin Phpmyadmin 2.5.6 Rc1Phpmyadmin Phpmyadmin 2.6.0 Pl1Phpmyadmin Phpmyadmin 2.5.2Phpmyadmin Phpmyadmin 2.5.1Phpmyadmin Phpmyadmin 2.5.4Phpmyadmin Phpmyadmin 2.5.3Phpmyadmin Phpmyadmin 2.5.6 Rc2Phpmyadmin Phpmyadmin 2.5.5 Rc2Phpmyadmin Phpmyadmin 2.5.5 Pl1
4.3
CVSSv2
CVE-2005-2869
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin prior to 2.6.4 allow remote malicious users to inject arbitrary web script or HTML via (1) the Username to libraries/auth/cookie.auth.lib.php or (2) the error parameter to error.php.
Phpmyadmin Phpmyadmin 2.1.1Phpmyadmin Phpmyadmin 2.2.4Phpmyadmin Phpmyadmin 2.1.2Phpmyadmin Phpmyadmin 2.2 Pre1Phpmyadmin Phpmyadmin 2.5.0Phpmyadmin Phpmyadmin 2.2Phpmyadmin Phpmyadmin 2.6.2 Pl1Phpmyadmin Phpmyadmin 2.0.4Phpmyadmin Phpmyadmin 2.6.1Phpmyadmin Phpmyadmin 2.6.1 Pl3Phpmyadmin Phpmyadmin 2.3.1Phpmyadmin Phpmyadmin 2.0.2Phpmyadmin Phpmyadmin 2.5.5 Rc1Phpmyadmin Phpmyadmin 2.6.0 Pl3Phpmyadmin Phpmyadmin 2.5.7 Pl1Phpmyadmin Phpmyadmin 2.4.0Phpmyadmin Phpmyadmin 2.5.5Phpmyadmin Phpmyadmin 2.5.7Phpmyadmin Phpmyadmin 2.5.6 Rc1Phpmyadmin Phpmyadmin 2.0.3Phpmyadmin Phpmyadmin 2.6.1 Pl1Phpmyadmin Phpmyadmin 2.2.6
5.8
CVSSv2
CVE-2006-3388
Cross-site scripting (XSS) vulnerability in phpMyAdmin prior to 2.8.2 allows remote malicious users to inject arbitrary web script or HTML via the table parameter.
Phpmyadmin Phpmyadmin 2.1.1Phpmyadmin Phpmyadmin 2.6.4 Rc1Phpmyadmin Phpmyadmin 2.2.4Phpmyadmin Phpmyadmin 2.1.2Phpmyadmin Phpmyadmin 2.2 Pre1Phpmyadmin Phpmyadmin 2.8.3Phpmyadmin Phpmyadmin 2.5.0Phpmyadmin Phpmyadmin 2.2Phpmyadmin Phpmyadmin 2.7 Pl1Phpmyadmin Phpmyadmin 2.6.4 Pl1Phpmyadmin Phpmyadmin 2.0.4Phpmyadmin Phpmyadmin 2.6.1Phpmyadmin Phpmyadmin 2.6.1 Pl3Phpmyadmin Phpmyadmin 2.3.1Phpmyadmin Phpmyadmin 2.0.2Phpmyadmin Phpmyadmin 2.5.5 Rc1Phpmyadmin Phpmyadmin 2.6.0 Pl3Phpmyadmin Phpmyadmin 2.5.7 Pl1Phpmyadmin Phpmyadmin 2.4.0Phpmyadmin Phpmyadmin 2.5.5Phpmyadmin Phpmyadmin 2.5.7Phpmyadmin Phpmyadmin 2.6.2 Rc1
4.3
CVSSv2
CVE-2006-1678
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin prior to 2.8.0.3 allow remote malicious users to inject arbitrary web script or HTML via unknown vectors in unspecified scripts in the themes directory.
Phpmyadmin Phpmyadmin 2.1.1Phpmyadmin Phpmyadmin 2.7.0Phpmyadmin Phpmyadmin 2.7.0 Pl1Phpmyadmin Phpmyadmin 2.6.4 Rc1Phpmyadmin Phpmyadmin 2.2.4Phpmyadmin Phpmyadmin 2.1.2Phpmyadmin Phpmyadmin 2.2.0 Rc2Phpmyadmin Phpmyadmin 2.5.0Phpmyadmin Phpmyadmin 2.2.0 Rc1Phpmyadmin Phpmyadmin 2.6.4 Pl1Phpmyadmin Phpmyadmin 2.0.4Phpmyadmin Phpmyadmin 2.6.1Phpmyadmin Phpmyadmin 2.6.1 Pl3Phpmyadmin Phpmyadmin 2.3.1Phpmyadmin Phpmyadmin 2.7.0 Pl2Phpmyadmin Phpmyadmin 2.0.2Phpmyadmin Phpmyadmin 2.5.5 Rc1Phpmyadmin Phpmyadmin 2.6.0 Pl3Phpmyadmin Phpmyadmin 2.5.7 Pl1Phpmyadmin Phpmyadmin 2.4.0Phpmyadmin Phpmyadmin 2.5.5Phpmyadmin Phpmyadmin 2.5.7
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23692CVE-2012-1823memory leakCVE-2024-0627CVE-2024-31402privilege escalationCVE-2024-36418remote code executionCVE-2024-27844
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook