Show filters
14 Total Results
Displaying 11-14 of 14
Sort by:
Attacker Value
Unknown
CVE-2005-3622
Disclosure Date: November 16, 2005 (last updated October 04, 2023)
phpMyAdmin 2.7.0-beta1 and earlier allows remote attackers to obtain the full path of the server via direct requests to multiple scripts in the libraries directory.
0
Attacker Value
Unknown
CVE-2005-3621
Disclosure Date: November 16, 2005 (last updated October 04, 2023)
CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts.
0
Attacker Value
Unknown
CVE-2005-3301
Disclosure Date: October 24, 2005 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl3 allow remote attackers to inject arbitrary web script or HTML via certain arguments to (1) left.php, (2) queryframe.php, or (3) server_databases.php.
0
Attacker Value
Unknown
CVE-2005-3300
Disclosure Date: October 23, 2005 (last updated October 04, 2023)
The register_globals emulation layer in grab_globals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks on values in the _FILES array for uploaded files, which allows remote attackers to include arbitrary files by using direct requests to library scripts that do not use grab_globals.php, then modifying certain configuration values for the theme.
0
