Published: 11/04/2006 Updated: 20/07/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin prior to 2.8.0.3 allow remote malicious users to inject arbitrary web script or HTML via unknown vectors in unspecified scripts in the themes directory.

Vulnerable Product	Search on Vulmon	Subscribe to Product
phpmyadmin phpmyadmin 2.0.1
phpmyadmin phpmyadmin 2.0.2
phpmyadmin phpmyadmin 2.2.0
phpmyadmin phpmyadmin 2.2.0_pre1
phpmyadmin phpmyadmin 2.2.5
phpmyadmin phpmyadmin 2.2.6
phpmyadmin phpmyadmin 2.5.3
phpmyadmin phpmyadmin 2.5.4
phpmyadmin phpmyadmin 2.5.7_pl1
phpmyadmin phpmyadmin 2.6.0_pl1
phpmyadmin phpmyadmin 2.6.0_pl2
phpmyadmin phpmyadmin 2.6.2_rc1
phpmyadmin phpmyadmin 2.6.3_pl1
phpmyadmin phpmyadmin 2.7.0_pl1
phpmyadmin phpmyadmin 2.7.0_pl2
phpmyadmin phpmyadmin 2.0.3
phpmyadmin phpmyadmin 2.0.4
phpmyadmin phpmyadmin 2.2.0_pre2
phpmyadmin phpmyadmin 2.2.0_rc1
phpmyadmin phpmyadmin 2.2.0_rc2
phpmyadmin phpmyadmin 2.3.1
phpmyadmin phpmyadmin 2.3.2
phpmyadmin phpmyadmin 2.5.5
phpmyadmin phpmyadmin 2.5.5_pl1
phpmyadmin phpmyadmin 2.6.0_pl3
phpmyadmin phpmyadmin 2.6.1
phpmyadmin phpmyadmin 2.6.4_pl1
phpmyadmin phpmyadmin 2.6.4_pl3
phpmyadmin phpmyadmin 2.0.5
phpmyadmin phpmyadmin 2.1.0
phpmyadmin phpmyadmin 2.2.0_rc3
phpmyadmin phpmyadmin 2.2.2
phpmyadmin phpmyadmin 2.4.0
phpmyadmin phpmyadmin 2.5.0
phpmyadmin phpmyadmin 2.5.5_rc1
phpmyadmin phpmyadmin 2.5.5_rc2
phpmyadmin phpmyadmin 2.6.1_pl1
phpmyadmin phpmyadmin 2.6.1_pl3
phpmyadmin phpmyadmin 2.6.4_pl4
phpmyadmin phpmyadmin 2.6.4_rc1
phpmyadmin phpmyadmin 2.0.0
phpmyadmin phpmyadmin 2.1.1
phpmyadmin phpmyadmin 2.1.2
phpmyadmin phpmyadmin 2.2.3
phpmyadmin phpmyadmin 2.2.4
phpmyadmin phpmyadmin 2.5.1
phpmyadmin phpmyadmin 2.5.2
phpmyadmin phpmyadmin 2.5.6_rc1
phpmyadmin phpmyadmin 2.5.7
phpmyadmin phpmyadmin 2.6.1_rc1
phpmyadmin phpmyadmin 2.6.2
phpmyadmin phpmyadmin 2.7.0
phpmyadmin phpmyadmin 2.7.0_beta1

The phpmyadmin update in DSA 1207 introduced a regression This update corrects this flaw For completeness, please find below the original advisory text: Several remote vulnerabilities have been discovered in phpMyAdmin, a program to administrate MySQL over the web The Common Vulnerabilities and Exposures project identifies the following problem ...

Debian Bug report logs - #368082 phpmyadmin: CVE-2006-2417 and CVE-2006-2418: XSS Package: phpmyadmin; Maintainer for phpmyadmin is Thijs Kinkhorst <thijs@debianorg>; Source for phpmyadmin is src:phpmyadmin (PTS, buildd, popcon) Reported by: Alec Berryman <alec@thenednet> Date: Fri, 19 May 2006 18:48:05 UTC Severi ...

Debian Bug report logs - #339437 HTTP Response Splitting vulnerability Package: phpmyadmin; Maintainer for phpmyadmin is Thijs Kinkhorst <thijs@debianorg>; Source for phpmyadmin is src:phpmyadmin (PTS, buildd, popcon) Reported by: Michal Čihař <michal@ciharcom> Date: Wed, 16 Nov 2005 10:33:02 UTC Severity: grave ...

Debian Bug report logs - #362567 CVE-2006-1678: Multiple cross-site scripting (XSS) vulnerabilities Package: phpmyadmin; Maintainer for phpmyadmin is Thijs Kinkhorst <thijs@debianorg>; Source for phpmyadmin is src:phpmyadmin (PTS, buildd, popcon) Reported by: Stefan Fritsch <sf@sfritschde> Date: Fri, 14 Apr 2006 09 ...

Debian Bug report logs - #340438 CVE-2005-3665: Cross-site scripting by trusting potentially user-supplied input Package: phpmyadmin; Maintainer for phpmyadmin is Thijs Kinkhorst <thijs@debianorg>; Source for phpmyadmin is src:phpmyadmin (PTS, buildd, popcon) Reported by: Piotr Roszatycki <Piotr_Roszatycki@netianetpl& ...

NVD-CWE-Other http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-1 http://www.securityfocus.com/bid/17390 http://secunia.com/advisories/19556 http://www.osvdb.org/24450 http://www.novell.com/linux/security/advisories/2006_04_28.html http://secunia.com/advisories/19897 http://www.debian.org/security/2006/dsa-1207 http://secunia.com/advisories/22781 http://www.vupen.com/english/advisories/2006/1263 https://exchange.xforce.ibmcloud.com/vulnerabilities/25689 https://nvd.nist.gov https://www.debian.org/security/./dsa-1207

CVE-2006-1678

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect