Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2006-2417

Published: 16/05/2006 Updated: 20/07/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Subscribe to Phpmyadmin

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.x prior to 2.8.0.4 allows remote malicious users to inject arbitrary web script or HTML via the theme parameter in unknown scripts. NOTE: the lang parameter is already covered by CVE-2006-2031.

Vulnerable Product Search on Vulmon Subscribe to Product

phpmyadmin phpmyadmin 2.8.0.1

phpmyadmin phpmyadmin 2.8.0.2

phpmyadmin phpmyadmin 2.8.0.3

Vendor Advisories

Debian CVElist Bug Report Logs: phpmyadmin: CVE-2006-2417 and CVE-2006-2418: XSS
Debian Bug report logs - #368082 phpmyadmin: CVE-2006-2417 and CVE-2006-2418: XSS Package: phpmyadmin; Maintainer for phpmyadmin is Thijs Kinkhorst <thijs@debianorg>; Source for phpmyadmin is src:phpmyadmin (PTS, buildd, popcon) Reported by: Alec Berryman <alec@thenednet> Date: Fri, 19 May 2006 18:48:05 UTC Severi ...
Debian CVElist Bug Report Logs: HTTP Response Splitting vulnerability
Debian Bug report logs - #339437 HTTP Response Splitting vulnerability Package: phpmyadmin; Maintainer for phpmyadmin is Thijs Kinkhorst <thijs@debianorg>; Source for phpmyadmin is src:phpmyadmin (PTS, buildd, popcon) Reported by: Michal Čihař <michal@ciharcom> Date: Wed, 16 Nov 2005 10:33:02 UTC Severity: grave ...
Debian CVElist Bug Report Logs: CVE-2006-1678: Multiple cross-site scripting (XSS) vulnerabilities
Debian Bug report logs - #362567 CVE-2006-1678: Multiple cross-site scripting (XSS) vulnerabilities Package: phpmyadmin; Maintainer for phpmyadmin is Thijs Kinkhorst <thijs@debianorg>; Source for phpmyadmin is src:phpmyadmin (PTS, buildd, popcon) Reported by: Stefan Fritsch <sf@sfritschde> Date: Fri, 14 Apr 2006 09 ...
Debian CVElist Bug Report Logs: CVE-2005-3665: Cross-site scripting by trusting potentially user-supplied input.
Debian Bug report logs - #340438 CVE-2005-3665: Cross-site scripting by trusting potentially user-supplied input Package: phpmyadmin; Maintainer for phpmyadmin is Thijs Kinkhorst <thijs@debianorg>; Source for phpmyadmin is src:phpmyadmin (PTS, buildd, popcon) Reported by: Piotr Roszatycki <Piotr_Roszatycki@netianetpl& ...

References

CWE-79http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-2http://secunia.com/advisories/20113http://www.securityfocus.com/bid/17973http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.htmlhttp://secunia.com/advisories/20627http://www.vupen.com/english/advisories/2006/1794https://exchange.xforce.ibmcloud.com/vulnerabilities/26444https://nvd.nist.govhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=368082
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32886insecure direct object referenceCVE-2024-34342file inclusionCVE-2024-34562CVE-2024-34347CVE-2024-26026CVE-2024-4647unprivileged
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook