Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2006-5116
HistoryOct 03, 2006 - 4:03 a.m.

CVE-2006-5116

2006-10-0304:03:00
NVD-CWE-Other
[email protected]
web.nvd.nist.gov
35
phpmyadmin
csrf
vulnerability
remote attack
unauthorized actions
security
nvd
cve-2006-5116

6.8 Medium

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.036 Low

EPSS

Percentile

91.6%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyAdmin before 2.9.1-rc1 allow remote attackers to perform unauthorized actions as another user by (1) directly setting a token in the URL though dynamic variable evaluation and (2) unsetting arbitrary variables via the _REQUEST array, related to (a) libraries/common.lib.php, (b) session.inc.php, and © url_generating.lib.php. NOTE: the PHP unset function vector is covered by CVE-2006-3017.

Related

debiancve 2
ubuntucve 4
nessus 15
phpmyadmin 1
openvas 9
freebsd 1
suse 3
debian 3
cve 13
osv 2
prion 4
redhat 2
centos 2
ubuntu 1
debiancve
debiancve
CVE-2006-5116
2006-10-03 04:03:00
CVE-2007-0233
2007-01-13 02:28:00
ubuntucve
ubuntucve
CVE-2006-5116
2006-10-03 00:00:00
CVE-2006-3017
2006-06-14 00:00:00
CVE-2007-0233
2007-01-13 00:00:00
nessus
nessus
phpMyAdmin < 2.9.1 Multiple Vulnerabilities
2006-10-06 00:00:00
phpMyAdmin < 2.9.1-rc1 Multiple Vulnerabilities
2006-09-28 00:00:00
FreeBSD : phpmyadmin -- CSRF vulnerabilities (19b17ab4-51e0-11db-a5ae-00508d6a62df)
2006-10-02 00:00:00
phpmyadmin
phpmyadmin
XSRF (Cross Site Request Forgery) vulnerabilities
2006-10-01 00:00:00
openvas
openvas
FreeBSD Ports: phpMyAdmin
2008-09-04 00:00:00
FreeBSD Ports: phpMyAdmin
2008-09-04 00:00:00
Debian Security Advisory DSA 1207-1 (phpmyadmin)
2008-01-17 00:00:00
freebsd
freebsd
phpmyadmin -- XSRF vulnerabilities
2006-09-28 00:00:00
suse
suse
cross site scripting in phpMyAdmin
2006-11-24 14:27:09
bug fix in php4
2006-06-22 15:32:39
remote code execution in PHP4,PHP5
2006-06-14 16:37:08
debian
debian
[SECURITY] [DSA 1207-1] New phpmyadmin packages fix several vulnerabilities
2006-11-09 18:00:21
[SECURITY] [DSA 1207-2] New phpmyadmin packages fix regression
2006-11-19 12:55:33
[SECURITY] [DSA 1206-1] New php4 packages fix several vulnerabilities
2006-11-06 18:13:12
cve
cve
CVE-2006-3017
2006-06-14 23:02:00
CVE-2007-0233
2007-01-13 02:28:00
CVE-2007-5416
2007-10-12 21:17:00
osv
osv
phpmyadmin
2006-11-09 00:00:00
php4
2006-11-06 00:00:00
prion
prion
Command injection
2007-10-09 18:17:00
Sql injection
2007-01-13 02:28:00
Sql injection
2009-09-11 16:30:00
redhat
redhat
(RHSA-2006:0568) php security update
2006-07-12 00:00:00
(RHSA-2006:0567) php security update
2006-07-25 00:00:00
centos
centos
php security update
2006-07-12 19:14:58
php security update
2006-07-26 22:56:15
ubuntu
ubuntu
PHP vulnerabilities
2006-07-19 00:00:00

6.8 Medium

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.036 Low

EPSS

Percentile

91.6%

JSON
Related for CVE-2006-5116
debiancve2ubuntucve4nessus15phpmyadmin1openvas9freebsd1suse3debian3cve13osv2prion4redhat2centos2ubuntu1