Lucene search

[email protected]NVD:CVE-2006-3388

HistoryJul 06, 2006 - 8:05 p.m.

CVE-2006-3388

2006-07-0620:05:00

[email protected]

web.nvd.nist.gov

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.009

Percentile

82.8%

JSON

Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the table parameter.

Affected configurations

Nvd

Node

phpmyadminphpmyadminMatch2.0

phpmyadminphpmyadminMatch2.0.1

phpmyadminphpmyadminMatch2.0.2

phpmyadminphpmyadminMatch2.0.3

phpmyadminphpmyadminMatch2.0.4

phpmyadminphpmyadminMatch2.0.5

phpmyadminphpmyadminMatch2.1

phpmyadminphpmyadminMatch2.1.1

phpmyadminphpmyadminMatch2.1.2

phpmyadminphpmyadminMatch2.2

phpmyadminphpmyadminMatch2.2.2

phpmyadminphpmyadminMatch2.2.3

phpmyadminphpmyadminMatch2.2.4

phpmyadminphpmyadminMatch2.2.5

phpmyadminphpmyadminMatch2.2.6

phpmyadminphpmyadminMatch2.2_pre1

phpmyadminphpmyadminMatch2.2_pre2

phpmyadminphpmyadminMatch2.2_rc1

phpmyadminphpmyadminMatch2.2_rc2

phpmyadminphpmyadminMatch2.2_rc3

phpmyadminphpmyadminMatch2.3.1

phpmyadminphpmyadminMatch2.3.2

phpmyadminphpmyadminMatch2.4.0

phpmyadminphpmyadminMatch2.5.0

phpmyadminphpmyadminMatch2.5.1

phpmyadminphpmyadminMatch2.5.2

phpmyadminphpmyadminMatch2.5.3

phpmyadminphpmyadminMatch2.5.4

phpmyadminphpmyadminMatch2.5.5

phpmyadminphpmyadminMatch2.5.5_pl1

phpmyadminphpmyadminMatch2.5.5_rc1

phpmyadminphpmyadminMatch2.5.5_rc2

phpmyadminphpmyadminMatch2.5.6_rc1

phpmyadminphpmyadminMatch2.5.7

phpmyadminphpmyadminMatch2.5.7_pl1

phpmyadminphpmyadminMatch2.6.0_pl1

phpmyadminphpmyadminMatch2.6.0_pl2

phpmyadminphpmyadminMatch2.6.0_pl3

phpmyadminphpmyadminMatch2.6.1

phpmyadminphpmyadminMatch2.6.1_pl1

phpmyadminphpmyadminMatch2.6.1_pl3

phpmyadminphpmyadminMatch2.6.1_rc1

phpmyadminphpmyadminMatch2.6.2

phpmyadminphpmyadminMatch2.6.2_rc1

phpmyadminphpmyadminMatch2.6.3_pl1

phpmyadminphpmyadminMatch2.6.4_pl1

phpmyadminphpmyadminMatch2.6.4_pl3

phpmyadminphpmyadminMatch2.6.4_pl4

phpmyadminphpmyadminMatch2.6.4_rc1

phpmyadminphpmyadminMatch2.7

phpmyadminphpmyadminMatch2.7.0_beta1

phpmyadminphpmyadminMatch2.7_pl1

phpmyadminphpmyadminMatch2.8.1

phpmyadminphpmyadminMatch2.8.3

phpmyadminphpmyadminMatch2.8.4

References

lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html

secunia.com/advisories/20907

secunia.com/advisories/23086

securitynews.ir/advisories/phpmyadmin281.txt

securityreason.com/securityalert/1194

www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-4

www.securityfocus.com/archive/1/438870/100/0/threaded

www.securityfocus.com/bid/18754

www.vupen.com/english/advisories/2006/2622

exchange.xforce.ibmcloud.com/vulnerabilities/27493

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.009

Percentile

82.8%

JSON

Related for NVD:CVE-2006-3388

cve1 cvelist1 ubuntucve1 phpmyadmin1 debiancve1 openvas1 nessus2 suse1