Lucene search
MitreCVELIST:CVE-2005-4450HistoryDec 21, 2005 - 11:00 a.m.
CVE-2005-4450
2005-12-2111:00:00
mitre
www.cve.org
6
phpmyadmin
csrf
remote attackers
unauthorized actions
logged-in user
link
img tag
server_privileges.php
dbname
checkprivs
disclosure
sql injection
Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.7.0 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag to server_privileges.php, as demonstrated using the dbname and checkprivs parameters. NOTE: the provenance of this issue is unknown, although third parties imply that it is related to the disclosure of CVE-2005-4349, which was labeled as SQL injection but disputed.
References
Related
nvd
nvd
CVE-2005-4349
2005-12-19 11:03:00
CVE-2005-4450
2005-12-21 11:03:00
cve
cve
CVE-2005-4450
2005-12-21 11:03:00
CVE-2005-4349
2005-12-19 11:03:00
cvelist
cvelist
CVE-2005-4349
2005-12-19 11:00:00
debiancve
debiancve
CVE-2005-4349
2005-12-19 11:03:00