Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-5718
HistoryNov 04, 2006 - 12:00 a.m.

CVE-2006-5718

2006-11-0400:00:00
ubuntu.com
ubuntu.com
19

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.004

Percentile

73.1%

Cross-site scripting (XSS) vulnerability in error.php in phpMyAdmin 2.6.4
through 2.9.0.2 allows remote attackers to inject arbitrary web script or
HTML via UTF-7 or US-ASCII encoded characters, which are injected into an
error message, as demonstrated by a request with a utf7 charset parameter
accompanied by UTF-7 data.

Notes

Author Note
fujitsu PMASA-2006-6

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.004

Percentile

73.1%