CVE-2006-6942

Опубликовано: 19 янв. 2007

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbitrary HTML or web script via (1) a comment for a table name, as exploited through (a) db_operations.php, (2) the db parameter to (b) db_create.php, (3) the newname parameter to db_operations.php, the (4) query_history_latest, (5) query_history_latest_db, and (6) querydisplay_tab parameters to (c) querywindow.php, and (7) the pos parameter to (d) sql.php.

Ссылки

http://marc.info/?l=bugtraq&m=116370414309444&w=2
Third Party Advisory
http://secunia.com/advisories/26733
Permissions Required
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-7
Patch
Vendor Advisory
http://www.securityfocus.com/bid/21137
Third Party Advisory
VDB Entry
http://www.us.debian.org/security/2007/dsa-1370
Third Party Advisory
http://www.vupen.com/english/advisories/2006/4572
Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/30310
http://marc.info/?l=bugtraq&m=116370414309444&w=2
Third Party Advisory
http://secunia.com/advisories/26733
Permissions Required
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-7
Patch
Vendor Advisory
http://www.securityfocus.com/bid/21137
Third Party Advisory
VDB Entry
http://www.us.debian.org/security/2007/dsa-1370
Third Party Advisory
http://www.vupen.com/english/advisories/2006/4572
Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/30310

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*

Версия до 2.9.1 (включая)

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.2:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.3:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_beta1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_rc1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01384

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2006-6942

ubuntu

больше 18 лет назад

CVE-2006-6942

debian

больше 18 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin befo ...

GHSA-ggm5-jxm9-g55m

github

около 3 лет назад

EPSS

Процентиль: 79%

0.01384

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-79