Published: 03/10/2006 Updated: 17/10/2018

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 454

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyAdmin prior to 2.9.1-rc1 allow remote malicious users to perform unauthorized actions as another user by (1) directly setting a token in the URL though dynamic variable evaluation and (2) unsetting arbitrary variables via the _REQUEST array, related to (a) libraries/common.lib.php, (b) session.inc.php, and (c) url_generating.lib.php. NOTE: the PHP unset function vector is covered by CVE-2006-3017.

Vulnerable Product	Search on Vulmon	Subscribe to Product
phpmyadmin phpmyadmin 2.8.0.1
phpmyadmin phpmyadmin 2.9.0_dev
phpmyadmin phpmyadmin 2.8.0.2
phpmyadmin phpmyadmin 2.8.0.3
phpmyadmin phpmyadmin 2.8.1
phpmyadmin phpmyadmin 2.8.1_dev
phpmyadmin phpmyadmin 2.8.3
phpmyadmin phpmyadmin 2.8.4

Debian Bug report logs - #391090 phpmyadmin: security issue PMASA-2006-5 Package: phpmyadmin; Maintainer for phpmyadmin is Thijs Kinkhorst <thijs@debianorg>; Source for phpmyadmin is src:phpmyadmin (PTS, buildd, popcon) Reported by: Laurent Bonnaud <LaurentBonnaud@inpgfr> Date: Wed, 4 Oct 2006 20:33:02 UTC Sever ...

Debian Bug report logs - #377748 phpmyadmin: CVE-2006-3388: cross-site scripting Package: phpmyadmin; Maintainer for phpmyadmin is Thijs Kinkhorst <thijs@debianorg>; Source for phpmyadmin is src:phpmyadmin (PTS, buildd, popcon) Reported by: Alec Berryman <alec@thenednet> Date: Tue, 11 Jul 2006 01:33:05 UTC Severit ...

The phpmyadmin update in DSA 1207 introduced a regression This update corrects this flaw For completeness, please find below the original advisory text: Several remote vulnerabilities have been discovered in phpMyAdmin, a program to administrate MySQL over the web The Common Vulnerabilities and Exposures project identifies the following problem ...

NVD-CWE-Other http://prdownloads.sourceforge.net/phpmyadmin/phpMyAdmin-2.9.1-rc1.tar.gz?download http://www.securityfocus.com/bid/20253 http://secunia.com/advisories/22126 http://attrition.org/pipermail/vim/2006-October/001067.html http://www.hardened-php.net/advisory_072006.130.html http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-5 http://www.debian.org/security/2006/dsa-1207 http://secunia.com/advisories/22781 http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html http://secunia.com/advisories/23086 http://securityreason.com/securityalert/1677 https://exchange.xforce.ibmcloud.com/vulnerabilities/29301 http://www.securityfocus.com/archive/1/447491/100/0/threaded https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391090 https://www.debian.org/security/./dsa-1207

CVE-2006-5116

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect