Phpmyadmin

Phpmyadmin

272 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2005-3621

  • EPSS 0.6%
  • Published 16.11.2005 11:02:00
  • Last modified 03.04.2025 01:03:51

CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts.

5

CVE-2005-3622

  • EPSS 0.63%
  • Published 16.11.2005 11:02:00
  • Last modified 03.04.2025 01:03:51

phpMyAdmin 2.7.0-beta1 and earlier allows remote attackers to obtain the full path of the server via direct requests to multiple scripts in the libraries directory.

4.3

CVE-2005-3301

  • EPSS 7.66%
  • Published 24.10.2005 10:02:00
  • Last modified 03.04.2025 01:03:51

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl3 allow remote attackers to inject arbitrary web script or HTML via certain arguments to (1) left.php, (2) queryframe.php, or (3) server_databases.php.

5

CVE-2005-3299

  • EPSS 8.86%
  • Published 23.10.2005 21:02:00
  • Last modified 03.04.2025 01:03:51

PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $__redirect parameter, possibly involving the subform array.

5

CVE-2005-3300

  • EPSS 1.89%
  • Published 23.10.2005 21:02:00
  • Last modified 03.04.2025 01:03:51

The register_globals emulation layer in grab_globals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks on values in the _FILES array for uploaded files, which allows remote attackers to include arbitrary files by using direct request...

4.3

CVE-2005-2869

Exploit
  • EPSS 12.55%
  • Published 08.09.2005 23:03:00
  • Last modified 03.04.2025 01:03:51

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the Username to libraries/auth/cookie.auth.lib.php or (2) the error parameter to error.php.

4.6

CVE-2005-1392

  • EPSS 0.05%
  • Published 03.05.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

The SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which allows local users to obtain the initial database password by reading the script.

5

CVE-2005-0459

Exploit
  • EPSS 0.36%
  • Published 02.05.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to select_lang.lib.php, which reveals the path in a PHP error message.

5

CVE-2005-0544

  • EPSS 0.5%
  • Published 02.05.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to (1) sqlvalidator.lib.php, (2) sqlparser.lib.php, (3) select_theme.lib.php, (4) select_lang.lib.php, (5) relation_cleanup.lib.php, (6) header_meta_st...

7.5

CVE-2005-0567

  • EPSS 1.22%
  • Published 02.05.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

Multiple PHP remote file inclusion vulnerabilities in phpMyAdmin 2.6.1 allow remote attackers to execute arbitrary PHP code by modifying the (1) theme parameter to phpmyadmin.css.php or (2) cfg[Server][extension] parameter to database_interface.lib.p...