CVE-2006-2418

Published: May 16, 2006Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to inject arbitrary web script or HTML via the db parameter in unknown scripts.

Affected (1)

Products: Phpmyadmin: Phpmyadmin

Phpmyadmin

1 product

Phpmyadmin

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 2.8.0.3

References (18)

http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html

Source: cve@mitre.org

Patch

http://secunia.com/advisories/20113

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/20627

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/22781

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2006/dsa-1207

Source: cve@mitre.org

PatchVendor Advisory

http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-2

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/17973

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/1794

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26441

Source: cve@mitre.org

http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html