CVE-2008-5622

CVE-2008-5622 is not a standalone active entry; it is listed together with CVE-2008-5621 in multiple advisories. Connected sources (Gentoo GLSA 200903-32, openSUSE/SUSE plugin references, and Debian/Gentoo/Nessus entries) describe phpMyAdmin vulnerabilities as CSRF-related, with vectors including...

SQL injection through XSRF on several pages

PMASA-2008-10 Announcement-ID: PMASA-2008-10 Date: 2008-12-09 Summary SQL injection through XSRF on several pages Description A logged-in user can be subject of SQL injection through cross site request forgery. Several pages which use affected library in phpMyAdmin are vulnerable and the attack c...

CVE-2008-5621

creationtimestamp| type| source ---|---|--- 2008-12-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7382...

CVE-2007-5621

CVE-2007-5621 involves multiple cross-site scripting (XSS) vulnerabilities in the Drupal Token module. Affected are Token versions before 4.7.x-1.5 and 5.x before 5.x-1.9, as used by modules such as ASIN Field, e-Commerce, Fullname field for CCK, Invite, Node Relativity, Pathauto, PayPal Node, an...

CVE-2006-5621

PHP remote file inclusion vulnerability in end.php in askrave 0.9 PR, and other versions before 0.9b, allows remote attackers to execute arbitrary PHP code via a URL in the footfile parameter...

CVE-2006-5621

CVE-2006-5621 concerns a PHP remote file inclusion in end.php of ask_rave 0.9 PR and earlier versions before 0.9b, allowing an attacker to execute arbitrary PHP code by supplying a URL in the footfile parameter. Affected software: ask_rave up to 0.9b. Root cause: improper handling of the footfile...

CVE-2006-5621

PHP remote file inclusion vulnerability in end.php in askrave 0.9 PR, and other versions before 0.9b, allows remote attackers to execute arbitrary PHP code via a URL in the footfile parameter...