CVE-2006-2417

Cross-site scripting XSS vulnerability in phpMyAdmin 2.8.0.x before 2.8.0.4 allows remote attackers to inject arbitrary web script or HTML via the theme parameter in unknown scripts. NOTE: the lang parameter is already covered by CVE-2006-2031...

CVE-2006-2417

Cross-site scripting XSS vulnerability in phpMyAdmin 2.8.0.x before 2.8.0.4 allows remote attackers to inject arbitrary web script or HTML via the theme parameter in unknown scripts. NOTE: the lang parameter is already covered by CVE-2006-2031...

CVE-2006-2418

Cross-site scripting XSS vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to inject arbitrary web script or HTML via the db parameter in unknown scripts...

DEBIAN-CVE-2006-2417

Cross-site scripting XSS vulnerability in phpMyAdmin 2.8.0.x before 2.8.0.4 allows remote attackers to inject arbitrary web script or HTML via the theme parameter in unknown scripts. NOTE: the lang parameter is already covered by CVE-2006-2031...

CVE-2006-2417

Cross-site scripting XSS vulnerability in phpMyAdmin 2.8.0.x before 2.8.0.4 allows remote attackers to inject arbitrary web script or HTML via the theme parameter in unknown scripts. NOTE: the lang parameter is already covered by CVE-2006-2031...

DEBIAN-CVE-2006-2418

Cross-site scripting XSS vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to inject arbitrary web script or HTML via the db parameter in unknown scripts...

Cross site scripting

Cross-site scripting XSS vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to inject arbitrary web script or HTML via the db parameter in unknown scripts...

CVE-2006-2418

Cross-site scripting XSS vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to inject arbitrary web script or HTML via the db parameter in unknown scripts...

CVE-2006-2418

Cross-site scripting XSS vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to inject arbitrary web script or HTML via the db parameter in unknown scripts...

CVE-2006-2417

Cross-site scripting XSS vulnerability in phpMyAdmin 2.8.0.x before 2.8.0.4 allows remote attackers to inject arbitrary web script or HTML via the theme parameter in unknown scripts. NOTE: the lang parameter is already covered by CVE-2006-2031...

CVE-2006-2418

CVE-2006-2418 is an XSS flaw in phpMyAdmin (affected versions prior to the fixes mentioned in advisories) where an attacker can inject script via the db parameter in footer.inc.php. Connected documents corroborate multiple phpMyAdmin XSS issues and specify that Debian/Debian-based advisories (DSA...

CVE-2006-2417

Cross-site scripting XSS vulnerability in phpMyAdmin 2.8.0.x before 2.8.0.4 allows remote attackers to inject arbitrary web script or HTML via the theme parameter in unknown scripts. NOTE: the lang parameter is already covered by CVE-2006-2031...

CVE-2006-2418

Cross-site scripting XSS vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to inject arbitrary web script or HTML via the db parameter in unknown scripts...

CVE-2006-2417

CVE-2006-2417 describes an XSS vulnerability in phpMyAdmin 2.8.0.x prior to 2.8.0.4, where an attacker can inject arbitrary script/HTML via the theme parameter in certain scripts (lang parameter covered by CVE-2006-2031). The vulnerability is remote and could lead to script execution in the victi...

CVE-2006-2418

Cross-site scripting XSS vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to inject arbitrary web script or HTML via the db parameter in unknown scripts...

[SA20113] phpMyAdmin "theme" and "db" Cross-Site Scripting Vulnerabilities

TITLE: phpMyAdmin "theme" and "db" Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA20113 VERIFY ADVISORY: http://secunia.com/advisories/20113/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: phpMyAdmin 2.x http://secunia.com/product/1720/ DESCRIPTION:...

FreeBSD : phpmyadmin -- XSS vulnerabilities (59ada6e5-676a-11da-99f6-00123ffe8333)

A phpMyAdmin security advisory reports : It was possible to conduct an XSS attack via the HTTPHOST variable; also, some scripts in the libraries directory that handle header generation were vulnerable to XSS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

FreeBSD : phpmyadmin -- HTTP Response Splitting vulnerability (c55f9ed0-56a7-11da-a3f0-00123ffe8333)

A phpMyAdmin security advisory reports : Some scripts in phpMyAdmin are vulnerable to an HTTP Response Splitting attack. Severity : We consider these vulnerabilities to be serious. However, they can only be triggered on systems running with registerglobals = on. %NASLMINLEVEL 70300 C Tenable...

FreeBSD : phpmyadmin -- local file inclusion vulnerability (9b7053fd-3ab5-11da-9484-00123ffe8333)

A phpMyAdmin security announcement reports : In libraries/grabglobals.lib.php, the $redirect parameter was not correctly validated, opening the door to a local file inclusion attack. We consider this vulnerability to be serious. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

FreeBSD : phpmyadmin -- XSS vulnerabilities (fba75b43-c588-11da-9110-00123ffe8333)

phpMyAdmin security announcement : It was possible to conduct an XSS attack with a direct call to some scripts under the themes directory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...