PhpMyAdminPHPMYADMIN:PMASA-2006-6XSS vulnerability
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
72.7%
PMASA-2006-6
Announcement-ID: PMASA-2006-6
Date: 2006-11-01
Summary
XSS vulnerability
Description
We received a security advisory from Stefan Esser ([email protected]) and we wish to thank him for his work. It was possible to produce XSS via a special URL containing UTF-7 codes
Severity
We consider this vulnerability to be serious.
Affected Versions
2.6.4 to 2.9.0.2.
Solution
Upgrade to phpMyAdmin 2.9.0.3 or newer.
References
Assigned CVE ids: CVE-2006-5718
Patches
The following commits have been made to fix this issue:
More information
For further information and in case of questions, please contact the phpMyAdmin team. Our website is phpmyadmin.net.
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpmyadmin | le | 2.9.0.2. |
Related
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
72.7%