Skip to content
OpenAdvisories
Unscored CVE-2005-3787 EUVD-2005-3782GHSA-28qp-wgp5-fp7m

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl4 allow remote attackers to inject arbitrary web script or…

Published Nov 24, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Package: phpmyadmin Ecosystem: Debian

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl4 allow remote attackers to inject arbitrary web script or HTML via (1) the cookie-based login panel, (2) the title parameter and (3) the table creation dialog.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 phpmyadmin 4:2.6.4-pl4-1 —
Debian 13 phpmyadmin 4:2.6.4-pl4-1 —
Debian 12 phpmyadmin 4:2.6.4-pl4-1 —
Debian 3.1 phpmyadmin 4:2.6.2-3sarge1 DSA-880-1
Debian 3.0 phpmyadmin No fix yet DSA-880-1

Advisories 1

References