CVE-2004-1055

Опубликовано: 01 мар. 2005

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PmaAbsoluteUri parameter, (2) the zero_rows parameter in read_dump.php, (3) the confirm form, or (4) an error message generated by the internal phpMyAdmin parser.

Ссылки

http://www.netvigilance.com/html/advisory0005.htm
Exploit
Vendor Advisory
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-3
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/18158
http://www.netvigilance.com/html/advisory0005.htm
Exploit
Vendor Advisory
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-3
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/18158

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.0:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*

cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*

cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*

cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01171

Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-1055

debian

больше 20 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6. ...

GHSA-pfw8-43jj-c4g3

github

около 3 лет назад