Phpmyadmin : Security Vulnerabilities, CVEs, CVSS score between 2 and 2.99
Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin 2.8.0.3, 2.8.0.2, 2.8.1-dev, and 2.9.0-dev allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
Max CVSS
2.6
EPSS Score
0.29%
Published
2006-04-26
Updated
2017-07-20
Cross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin before 2.11.2.2, when logins are authenticated with the cookie auth_type, allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter to index.php, a different vulnerability than CVE-2005-0992.
Max CVSS
2.6
EPSS Score
0.30%
Published
2007-11-23
Updated
2017-07-29
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.11.7, when register_globals is enabled and .htaccess support is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving scripts in libraries/.
Max CVSS
2.6
EPSS Score
0.43%
Published
2008-07-02
Updated
2017-08-08
Cross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify config/config.inc.php.
Max CVSS
2.6
EPSS Score
0.41%
Published
2008-08-04
Updated
2017-08-08
Cross-site scripting (XSS) vulnerability in pmd_pdf.php in phpMyAdmin 3.0.0, and possibly other versions including 2.11.9.2 and 3.0.1, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the db parameter, a different vector than CVE-2006-6942 and CVE-2007-5977.
Max CVSS
2.6
EPSS Score
0.80%
Published
2008-10-28
Updated
2018-10-11
Multiple cross-site scripting (XSS) vulnerabilities in the table Print view implementation in tbl_printview.php in phpMyAdmin before 3.3.10.3 and 3.4.x before 3.4.3.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name.
Max CVSS
2.6
EPSS Score
0.33%
Published
2011-08-01
Updated
2017-08-29
6 vulnerabilities found