4.3

CVE-2005-2869

Exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the Username to libraries/auth/cookie.auth.lib.php or (2) the error parameter to error.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpmyadmin ≫ Phpmyadmin Version2.0
Phpmyadmin ≫ Phpmyadmin Version2.0.1
Phpmyadmin ≫ Phpmyadmin Version2.0.2
Phpmyadmin ≫ Phpmyadmin Version2.0.3
Phpmyadmin ≫ Phpmyadmin Version2.0.4
Phpmyadmin ≫ Phpmyadmin Version2.0.5
Phpmyadmin ≫ Phpmyadmin Version2.1
Phpmyadmin ≫ Phpmyadmin Version2.1.1
Phpmyadmin ≫ Phpmyadmin Version2.1.2
Phpmyadmin ≫ Phpmyadmin Version2.2
Phpmyadmin ≫ Phpmyadmin Version2.2.2
Phpmyadmin ≫ Phpmyadmin Version2.2.3
Phpmyadmin ≫ Phpmyadmin Version2.2.4
Phpmyadmin ≫ Phpmyadmin Version2.2.5
Phpmyadmin ≫ Phpmyadmin Version2.2.6
Phpmyadmin ≫ Phpmyadmin Version2.2_pre1
Phpmyadmin ≫ Phpmyadmin Version2.2_pre2
Phpmyadmin ≫ Phpmyadmin Version2.2_rc1
Phpmyadmin ≫ Phpmyadmin Version2.2_rc2
Phpmyadmin ≫ Phpmyadmin Version2.2_rc3
Phpmyadmin ≫ Phpmyadmin Version2.3.1
Phpmyadmin ≫ Phpmyadmin Version2.3.2
Phpmyadmin ≫ Phpmyadmin Version2.4.0
Phpmyadmin ≫ Phpmyadmin Version2.5.0
Phpmyadmin ≫ Phpmyadmin Version2.5.1
Phpmyadmin ≫ Phpmyadmin Version2.5.2
Phpmyadmin ≫ Phpmyadmin Version2.5.3
Phpmyadmin ≫ Phpmyadmin Version2.5.4
Phpmyadmin ≫ Phpmyadmin Version2.5.5
Phpmyadmin ≫ Phpmyadmin Version2.5.5_pl1
Phpmyadmin ≫ Phpmyadmin Version2.5.5_rc1
Phpmyadmin ≫ Phpmyadmin Version2.5.5_rc2
Phpmyadmin ≫ Phpmyadmin Version2.5.6_rc1
Phpmyadmin ≫ Phpmyadmin Version2.5.7
Phpmyadmin ≫ Phpmyadmin Version2.5.7_pl1
Phpmyadmin ≫ Phpmyadmin Version2.6.0_pl1
Phpmyadmin ≫ Phpmyadmin Version2.6.0_pl2
Phpmyadmin ≫ Phpmyadmin Version2.6.0_pl3
Phpmyadmin ≫ Phpmyadmin Version2.6.1
Phpmyadmin ≫ Phpmyadmin Version2.6.1_pl1
Phpmyadmin ≫ Phpmyadmin Version2.6.1_pl3
Phpmyadmin ≫ Phpmyadmin Version2.6.1_rc1
Phpmyadmin ≫ Phpmyadmin Version2.6.2
Phpmyadmin ≫ Phpmyadmin Version2.6.2_pl1
Phpmyadmin ≫ Phpmyadmin Version2.6.3
Phpmyadmin ≫ Phpmyadmin Version2.6.3_pl1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.09% 0.913
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/17559
http://secunia.com/advisories/16605
Vendor Advisory
http://secunia.com/advisories/17337
http://secunia.com/advisories/17607
http://sourceforge.net/tracker/index.php?func=detail&aid=1240880&group_id=23067&atid=377408
Vendor Advisory
Exploit
http://sourceforge.net/tracker/index.php?func=detail&aid=1265740&group_id=23067&atid=377408
Vendor Advisory
Exploit
http://www.debian.org/security/2005/dsa-880
http://www.novell.com/linux/security/advisories/2005_28_sr.html
http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html