Lucene search

K
nvd[email protected]NVD:CVE-2005-2869
HistorySep 08, 2005 - 11:03 p.m.

CVE-2005-2869

2005-09-0823:03:00
web.nvd.nist.gov
6

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.26

Percentile

96.8%

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the Username to libraries/auth/cookie.auth.lib.php or (2) the error parameter to error.php.

Affected configurations

Nvd
Node
phpmyadminphpmyadminMatch2.0
OR
phpmyadminphpmyadminMatch2.0.1
OR
phpmyadminphpmyadminMatch2.0.2
OR
phpmyadminphpmyadminMatch2.0.3
OR
phpmyadminphpmyadminMatch2.0.4
OR
phpmyadminphpmyadminMatch2.0.5
OR
phpmyadminphpmyadminMatch2.1
OR
phpmyadminphpmyadminMatch2.1.1
OR
phpmyadminphpmyadminMatch2.1.2
OR
phpmyadminphpmyadminMatch2.2
OR
phpmyadminphpmyadminMatch2.2.2
OR
phpmyadminphpmyadminMatch2.2.3
OR
phpmyadminphpmyadminMatch2.2.4
OR
phpmyadminphpmyadminMatch2.2.5
OR
phpmyadminphpmyadminMatch2.2.6
OR
phpmyadminphpmyadminMatch2.2_pre1
OR
phpmyadminphpmyadminMatch2.2_pre2
OR
phpmyadminphpmyadminMatch2.2_rc1
OR
phpmyadminphpmyadminMatch2.2_rc2
OR
phpmyadminphpmyadminMatch2.2_rc3
OR
phpmyadminphpmyadminMatch2.3.1
OR
phpmyadminphpmyadminMatch2.3.2
OR
phpmyadminphpmyadminMatch2.4.0
OR
phpmyadminphpmyadminMatch2.5.0
OR
phpmyadminphpmyadminMatch2.5.1
OR
phpmyadminphpmyadminMatch2.5.2
OR
phpmyadminphpmyadminMatch2.5.3
OR
phpmyadminphpmyadminMatch2.5.4
OR
phpmyadminphpmyadminMatch2.5.5
OR
phpmyadminphpmyadminMatch2.5.5_pl1
OR
phpmyadminphpmyadminMatch2.5.5_rc1
OR
phpmyadminphpmyadminMatch2.5.5_rc2
OR
phpmyadminphpmyadminMatch2.5.6_rc1
OR
phpmyadminphpmyadminMatch2.5.7
OR
phpmyadminphpmyadminMatch2.5.7_pl1
OR
phpmyadminphpmyadminMatch2.6.0_pl1
OR
phpmyadminphpmyadminMatch2.6.0_pl2
OR
phpmyadminphpmyadminMatch2.6.0_pl3
OR
phpmyadminphpmyadminMatch2.6.1
OR
phpmyadminphpmyadminMatch2.6.1_pl1
OR
phpmyadminphpmyadminMatch2.6.1_pl3
OR
phpmyadminphpmyadminMatch2.6.1_rc1
OR
phpmyadminphpmyadminMatch2.6.2
OR
phpmyadminphpmyadminMatch2.6.2_pl1
OR
phpmyadminphpmyadminMatch2.6.3
OR
phpmyadminphpmyadminMatch2.6.3_pl1
VendorProductVersionCPE
phpmyadminphpmyadmin2.0cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.0.1cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.0.2cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.0.3cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.0.4cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.0.5cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.1cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.1.1cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.1.2cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.2cpe:2.3:a:phpmyadmin:phpmyadmin:2.2:*:*:*:*:*:*:*
Rows per page:
1-10 of 461

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.26

Percentile

96.8%