CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6724 matches found

NVD•added 2005/03/01 5:00 a.m.•43 views

CVE-2004-1055

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PmaAbsoluteUri parameter, 2 the zerorows parameter in readdump.php, 3 the confirm form, or 4 an error message generated by the internal...

6.8CVSS5.7AI score0.01475EPSS

SaveExploits1References3

Debian CVE•added 2005/02/27 5:00 a.m.•50 views

CVE-2005-0567

Multiple PHP remote file inclusion vulnerabilities in phpMyAdmin 2.6.1 allow remote attackers to execute arbitrary PHP code by modifying the 1 theme parameter to phpmyadmin.css.php or 2 cfgServerextension parameter to databaseinterface.lib.php to reference a URL on a remote web server that contai...

7.5CVSS7.4AI score0.02726EPSS

SaveExploits0

Cvelist•added 2005/02/27 5:00 a.m.•56 views

CVE-2005-0567

7.4AI score0.02726EPSS

SaveExploits0References6

CVE•added 2005/02/27 5:00 a.m.•90 views

CVE-2005-0567

CVE-2005-0567 affects phpMyAdmin 2.6.1 with multiple remote file inclusion vulnerabilities. An attacker can modify the theme parameter to phpmyadmin.css.php or the cfg[Server][extension] parameter to database_interface.lib.php to reference a URL on a remote server, enabling execution of arbitrary...

7.5CVSS7.5AI score0.02726EPSS

SaveExploits0References6Affected Software1

Rapid7 Vulnerability Database (full)•added 2005/02/27 12:00 a.m.•8 views

CVE-2005-0567: Undefined Security Weakness

7.5CVSS6.5AI score0.02726EPSS

SaveExploits0References1

Packet Storm•added 2005/02/26 12:00 a.m.•43 views

phpMyAdmin261.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4 Author: Maksymilian Arciemowicz cXIb8O3 Date: 24.2.2005 - --- 0.Description --- phpMyAdmin 2.6.1 is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently i...

7.4AI score

SaveExploits0

phpMyAdmin•added 2005/02/26 12:00 a.m.•62 views

Path disclosure

PMASA-2005-2 Announcement-ID: PMASA-2005-2 Date: 2005-02-26 Summary Path disclosure Description By calling some scripts that are part of phpMyAdmin in an unexpected way especially scripts in the libraries subdirectory, it is possible to trigger phpMyAdmin to display a PHP error message which...

5CVSS5.6AI score0.01457EPSS

SaveExploits0

securityvulns•added 2005/02/25 12:00 a.m.•41 views

[SECURITYREASON.COM] phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4

0.5AI score

SaveExploits0

Tenable Nessus•added 2005/02/25 12:00 a.m.•280 views

phpMyAdmin Detection

The remote host is running phpMyAdmin, a web-based MySQL administration tool written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17219; scriptversion"1.29"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

5.5AI score

SaveExploits0References1

Tenable Nessus•added 2005/02/25 12:00 a.m.•64 views

phpMyAdmin < 2.6.1 pl2 Libraries and Themes Multiple XSS

The installed version of phpMyAdmin suffers from multiple cross-site scripting vulnerabilities due to its failure to sanitize user input in several PHP scripts used as libraries and themes. A remote attacker may use these issues to cause arbitrary code to be executed in a user's browser, to steal...

4.3CVSS6AI score0.03964EPSS

SaveExploits5References3

Tenable Nessus•added 2005/02/25 12:00 a.m.•42 views

phpMyAdmin < 2.6.1 pl1 Multiple Script File Inclusions

The installed version of phpMyAdmin suffers from multiple local file include flaws due to its failure to sanitize user input prior to its use in PHP 'include' and 'requireonce' calls. Specifically, a remote attacker can control values for the 'GLOBALScfgThemePath' parameter used in...

7.5CVSS5.9AI score0.02726EPSS

SaveExploits0References3

phpMyAdmin•added 2005/02/25 12:00 a.m.•44 views

A variable injection vulnerability was found in phpMyAdmin, that may allow an attacker to conduct Cross-site scripting (XSS) attacks and / or perform remote file inclusion.

PMASA-2005-1 Announcement-ID: PMASA-2005-1 Date: 2005-02-25 Summary A variable injection vulnerability was found in phpMyAdmin, that may allow an attacker to conduct Cross-site scripting XSS attacks and / or perform remote file inclusion. Description We received two bug reports by Maksymilian...

7.5CVSS5.9AI score0.02726EPSS

SaveExploits0Affected Software1

NVD•added 2005/02/24 5:00 a.m.•36 views

CVE-2005-0543

Cross-site scripting XSS vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via 1 the strServer, cfgBgcolorOne, or strServerChoice parameters in selectserver.lib.php, 2 the bgcolor or rowno parameters in displaytbllinks.lib.php, the leftfontfamily...

4.3CVSS5.6AI score0.03964EPSS

SaveExploits5References6

osv_cve•added 2005/02/24 5:00 a.m.•14 views

CVE-2005-0543

5.6AI score0.03964EPSS

SaveExploits5References10

Cvelist•added 2005/02/24 5:00 a.m.•49 views

CVE-2005-0543

5.5AI score0.03964EPSS

SaveExploits5References6

Debian CVE•added 2005/02/24 5:00 a.m.•59 views

CVE-2005-0544

phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to 1 sqlvalidator.lib.php, 2 sqlparser.lib.php, 3 selecttheme.lib.php, 4 selectlang.lib.php, 5 relationcleanup.lib.php, 6 headermetastyle.inc.php, 7 getforeign.lib.php, 8 displaytbllinks.lib.php, 9...

5CVSS6.3AI score0.01457EPSS

SaveExploits0

Debian CVE•added 2005/02/24 5:00 a.m.•64 views

CVE-2005-0543

4.3CVSS5.7AI score0.03964EPSS

SaveExploits5

osv_debian•added 2005/02/24 5:00 a.m.•10 views

DEBIAN-CVE-2005-0543

4.3CVSS6.1AI score0.03964EPSS

SaveExploits5References1

UbuntuCve•added 2005/02/24 5:00 a.m.•41 views

CVE-2005-0543

4.3CVSS6AI score0.03964EPSS

SaveExploits5References1

Cvelist•added 2005/02/24 5:00 a.m.•52 views

CVE-2005-0544

6.3AI score0.01457EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by