Published: 19/01/2007 Updated: 29/07/2017

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 700

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin prior to 2.9.1.1 allow remote malicious users to inject arbitrary HTML or web script via (1) a comment for a table name, as exploited through (a) db_operations.php, (2) the db parameter to (b) db_create.php, (3) the newname parameter to db_operations.php, the (4) query_history_latest, (5) query_history_latest_db, and (6) querydisplay_tab parameters to (c) querywindow.php, and (7) the pos parameter to (d) sql.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
phpmyadmin phpmyadmin 2.9.0
phpmyadmin phpmyadmin 2.9.1_rc2
phpmyadmin phpmyadmin
phpmyadmin phpmyadmin 2.9.0.1
phpmyadmin phpmyadmin 2.9.0.2
phpmyadmin phpmyadmin 2.9.0_rc1
phpmyadmin phpmyadmin 2.9.1_rc1
phpmyadmin phpmyadmin 2.9.0.3
phpmyadmin phpmyadmin 2.9.0_beta1
debian debian linux 4.0
debian debian linux 3.1

Debian Bug report logs - #451465 phpmyadmin: CVE-2007-5977 and CVE-2007-5976 Package: phpmyadmin; Maintainer for phpmyadmin is Thijs Kinkhorst <thijs@debianorg>; Source for phpmyadmin is src:phpmyadmin (PTS, buildd, popcon) Reported by: Steffen Joeris <steffenjoeris@skolelinuxde> Date: Fri, 16 Nov 2007 04:21:01 UT ...

source: wwwsecurityfocuscom/bid/21137/info phpMyAdmin is prone to multiple input-validation vulnerabilities, including an HTML-injection vulnerability, cross-site scripting vulnerabilities, and information-disclosure vulnerabilities An attacker could exploit these vulnerabilities to view sensitive information or to have arbitrary sc ...

source: wwwsecurityfocuscom/bid/21137/info phpMyAdmin is prone to multiple input-validation vulnerabilities, including an HTML-injection vulnerability, cross-site scripting vulnerabilities, and information-disclosure vulnerabilities An attacker could exploit these vulnerabilities to view sensitive information or to have arbitrary ...

source: wwwsecurityfocuscom/bid/21137/info phpMyAdmin is prone to multiple input-validation vulnerabilities, including an HTML-injection vulnerability, cross-site scripting vulnerabilities, and information-disclosure vulnerabilities An attacker could exploit these vulnerabilities to view sensitive information or to have arbitrary script ...

source: wwwsecurityfocuscom/bid/21137/info phpMyAdmin is prone to multiple input-validation vulnerabilities, including an HTML-injection vulnerability, cross-site scripting vulnerabilities, and information-disclosure vulnerabilities An attacker could exploit these vulnerabilities to view sensitive information or to have arbitrary scri ...

CWE-79 http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-7 http://www.securityfocus.com/bid/21137 http://www.us.debian.org/security/2007/dsa-1370 http://secunia.com/advisories/26733 http://www.vupen.com/english/advisories/2006/4572 http://marc.info/?l=bugtraq&m=116370414309444&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/30310 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=451465 https://nvd.nist.gov https://www.exploit-db.com/exploits/29060/

CVE-2006-6942

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect