Vulnerability Description
Cross-site scripting (XSS) vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to inject arbitrary web script or HTML via the db parameter in unknown scripts.
CVSS Score
6.8
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Phpmyadmin | Phpmyadmin | 2.8.0.3 |
References
- http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.htmlPatch
- http://secunia.com/advisories/20113PatchVendor Advisory
- http://secunia.com/advisories/20627PatchVendor Advisory
- http://secunia.com/advisories/22781PatchVendor Advisory
- http://www.debian.org/security/2006/dsa-1207PatchVendor Advisory
- http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-2PatchVendor Advisory
- http://www.securityfocus.com/bid/17973Patch
- http://www.vupen.com/english/advisories/2006/1794
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26441
- http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.htmlPatch
- http://secunia.com/advisories/20113PatchVendor Advisory
- http://secunia.com/advisories/20627PatchVendor Advisory
- http://secunia.com/advisories/22781PatchVendor Advisory
- http://www.debian.org/security/2006/dsa-1207PatchVendor Advisory
- http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-2PatchVendor Advisory
FAQ
What is CVE-2006-2418?
CVE-2006-2418 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Cross-site scripting (XSS) vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to inject arbitrary web script or HTML via the db parameter in unknown scripts.
How severe is CVE-2006-2418?
CVE-2006-2418 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2006-2418?
Check the references section above for vendor advisories and patch information. Affected products include: Phpmyadmin Phpmyadmin.