Published: 24/10/2005 Updated: 08/03/2011

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin prior to 2.6.4-pl3 allow remote malicious users to inject arbitrary web script or HTML via certain arguments to (1) left.php, (2) queryframe.php, or (3) server_databases.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
phpmyadmin phpmyadmin 2.6.4
phpmyadmin phpmyadmin 2.6.4_pl1
phpmyadmin phpmyadmin 2.6.4_pl2
phpmyadmin phpmyadmin 2.6.4_rc1

Debian Bug report logs - #335513 CVE-2005-3301: Cross-Site Scripting vulnerability Package: phpmyadmin; Maintainer for phpmyadmin is Thijs Kinkhorst <thijs@debianorg>; Source for phpmyadmin is src:phpmyadmin (PTS, buildd, popcon) Reported by: 4:262-3 Date: Mon, 24 Oct 2005 15:18:19 UTC Severity: important Tags: fixed, ...

Debian Bug report logs - #335306 CVE-2005-3300: Local file inclusion vulnerability Package: phpmyadmin; Maintainer for phpmyadmin is Thijs Kinkhorst <thijs@debianorg>; Source for phpmyadmin is src:phpmyadmin (PTS, buildd, popcon) Reported by: 4:262-3 Date: Sun, 23 Oct 2005 09:48:08 UTC Severity: grave Tags: fixed, sarg ...

source: wwwsecurityfocuscom/bid/15196/info phpMyAdmin is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the contex ...

source: wwwsecurityfocuscom/bid/15196/info phpMyAdmin is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context ...

NVD-CWE-Other http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5 http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml http://www.debian.org/security/2005/dsa-880 http://secunia.com/advisories/17337 http://www.securityfocus.com/bid/15196 http://www.novell.com/linux/security/advisories/2005_28_sr.html http://secunia.com/advisories/17559 http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html http://secunia.com/advisories/17607 http://www.vupen.com/english/advisories/2005/2179 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=335513 https://www.exploit-db.com/exploits/26393/

CVE-2005-3301

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect