Lucene search

K
cveMitreCVE-2005-0992
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0992

2005-05-0204:00:00
mitre
web.nvd.nist.gov
47
cve-2005-0992
xss vulnerability
phpmyadmin
web script injection
html injection
convcharset parameter
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.006

Percentile

78.4%

Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter.

Affected configurations

Nvd
Node
phpmyadminphpmyadminMatch2.0
OR
phpmyadminphpmyadminMatch2.0.1
OR
phpmyadminphpmyadminMatch2.0.2
OR
phpmyadminphpmyadminMatch2.0.3
OR
phpmyadminphpmyadminMatch2.0.4
OR
phpmyadminphpmyadminMatch2.0.5
OR
phpmyadminphpmyadminMatch2.1
OR
phpmyadminphpmyadminMatch2.1.1
OR
phpmyadminphpmyadminMatch2.1.2
OR
phpmyadminphpmyadminMatch2.2
OR
phpmyadminphpmyadminMatch2.2.2
OR
phpmyadminphpmyadminMatch2.2.3
OR
phpmyadminphpmyadminMatch2.2.4
OR
phpmyadminphpmyadminMatch2.2.5
OR
phpmyadminphpmyadminMatch2.2.6
OR
phpmyadminphpmyadminMatch2.2_pre1
OR
phpmyadminphpmyadminMatch2.2_pre2
OR
phpmyadminphpmyadminMatch2.2_rc1
OR
phpmyadminphpmyadminMatch2.2_rc2
OR
phpmyadminphpmyadminMatch2.2_rc3
OR
phpmyadminphpmyadminMatch2.3.1
OR
phpmyadminphpmyadminMatch2.3.2
OR
phpmyadminphpmyadminMatch2.4.0
OR
phpmyadminphpmyadminMatch2.5.0
OR
phpmyadminphpmyadminMatch2.5.1
OR
phpmyadminphpmyadminMatch2.5.2
OR
phpmyadminphpmyadminMatch2.5.3
OR
phpmyadminphpmyadminMatch2.5.4
OR
phpmyadminphpmyadminMatch2.5.5
OR
phpmyadminphpmyadminMatch2.5.5_pl1
OR
phpmyadminphpmyadminMatch2.5.5_rc1
OR
phpmyadminphpmyadminMatch2.5.5_rc2
OR
phpmyadminphpmyadminMatch2.5.6_rc1
OR
phpmyadminphpmyadminMatch2.5.7
OR
phpmyadminphpmyadminMatch2.5.7_pl1
OR
phpmyadminphpmyadminMatch2.6.0_pl1
OR
phpmyadminphpmyadminMatch2.6.0_pl2
OR
phpmyadminphpmyadminMatch2.6.0_pl3
OR
phpmyadminphpmyadminMatch2.6.1
OR
phpmyadminphpmyadminMatch2.6.1_pl1
OR
phpmyadminphpmyadminMatch2.6.1_pl3
OR
phpmyadminphpmyadminMatch2.6.1_rc1
VendorProductVersionCPE
phpmyadminphpmyadmin2.0cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.0.1cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.0.2cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.0.3cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.0.4cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.0.5cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.1cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.1.1cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.1.2cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.2cpe:2.3:a:phpmyadmin:phpmyadmin:2.2:*:*:*:*:*:*:*
Rows per page:
1-10 of 421

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.006

Percentile

78.4%