6030 matches found
CVE-2006-1804
PHPMyAdmin 2.7.0-pl1 contains a SQL injection in sql.php via the sql_query parameter, allowing remote attackers to execute arbitrary SQL. Documented as CVE-2006-1804 across NVD/OSV/FreeBSD VuXML/OpenVAS; CVSS v2 base score 7.5 (HIGH) with partial impact on confidentiality, integrity, and availabi...
CVE-2006-1804
SQL injection vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to execute arbitrary SQL commands via the sqlquery parameter...
CVE-2006-1803
Cross-site scripting XSS vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to inject arbitrary web script or HTML via the sqlquery parameter...
CVE-2006-1803
CVE-2006-1803 is a cross-site scripting (XSS) vulnerability in phpMyAdmin 2.7.0-pl1, exploitable via the sql_query parameter in sql.php. The issue allows remote attackers to inject arbitrary web script or HTML. This detailed description is consistently echoed across multiple sources (NVD, SUSE, O...
CVE-2006-1804
SQL injection vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to execute arbitrary SQL commands via the sqlquery parameter...
phpMyAdmin 2.7.0-pl1
App: phpMyAdmin 2.7.0-pl1 Advistory by: p0w3r Exploit: /phpmyadmin/sql.php?lang=de-utf-8&server=1&collationconnection=utf8generalci&db=fu&table=fu&goto=tblpropertiesstructure.php&back=tblpropertiesstructure.php&sqlquery=XSS Example:...
CVE-2006-1678
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors in unspecified scripts in the themes directory...
CVE-2006-1678
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors in unspecified scripts in the themes directory...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors in unspecified scripts in the themes directory...
CVE-2006-1678
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors in unspecified scripts in the themes directory...
DEBIAN-CVE-2006-1678
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors in unspecified scripts in the themes directory...
CVE-2006-1678
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors in unspecified scripts in the themes directory...
CVE-2006-1678
phpMyAdmin is affected by CVE-2006-1678 (XSS via themes directory) in versions prior to 2.8.0.3. The OpenVAS/OpenVAS-related Debian advisories enumerate multiple CVEs including CVE-2006-1678 and describe remote XSS risks. Affected software: phpMyAdmin; root cause: cross-site scripting via scripts...
CVE-2006-1678
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors in unspecified scripts in the themes directory...
[SA19556] phpMyAdmin Cross-Site Scripting Vulnerabilities
TITLE: phpMyAdmin Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA19556 VERIFY ADVISORY: http://secunia.com/advisories/19556/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: phpMyAdmin 2.x http://secunia.com/product/1720/ phpMyAdmin 1.x...
XSS vulnerabilities
PMASA-2006-1 Announcement-ID: PMASA-2006-1 Date: 2006-04-06 Summary XSS vulnerabilities Description It was possible to conduct an XSS attack with a direct call to some scripts under the themes directory. We wish to thank Toni Koivunen/CERT-FI for this advisory. Severity We consider these...
phpmyadmin -- XSS vulnerabilities
phpMyAdmin security announcement: It was possible to conduct an XSS attack with a direct call to some scripts under the themes directory...
CVE-2006-1258
Cross-site scripting XSS vulnerability in phpMyAdmin 2.8.0.1 allows remote attackers to inject arbitrary web script or HTML via the settheme parameter...