CVE-2005-3665

phpMyAdmin < 2.7.0 - Cross-Site Scripting via HTTP_HOST Variable and Header Generation Scripts

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_HOST variable and (2) various scripts in the libraries directory that handle header generation.

References (10)

Core 10
Core References
Third Party Advisory, VDB Entry vendor-advisory x_refsource_suse
http://www.securityfocus.com/archive/1/423142/100/0/threaded
Patch, Vendor Advisory x_refsource_confirm
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-8
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200512-03.xml
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-1207
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22781
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15735
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17957
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2772
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18618
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17895

Scores

EPSS 0.0112
EPSS Percentile 78.4%

Details

Status published
Products (49)
phpmyadmin/phpmyadmin 2.0
phpmyadmin/phpmyadmin 2.0.1
phpmyadmin/phpmyadmin 2.0.2
phpmyadmin/phpmyadmin 2.0.3
phpmyadmin/phpmyadmin 2.0.4
phpmyadmin/phpmyadmin 2.0.5
phpmyadmin/phpmyadmin 2.1
phpmyadmin/phpmyadmin 2.1.1
phpmyadmin/phpmyadmin 2.1.2
phpmyadmin/phpmyadmin 2.2
... and 39 more
Published Dec 08, 2005
Tracked Since Feb 18, 2026