CVE-2006-6942

phpMyAdmin < 2.9.1 - Cross-Site Scripting via Multiple Parameters

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 4 public exploits for CVE-2006-6942. PoCs published by laurent gaffie.

AI-analyzed exploit summary This exploit demonstrates an XSS vulnerability in phpMyAdmin by injecting a malicious script into the URL, which executes arbitrary JavaScript in the context of the affected site. It targets the 'table' parameter in the 'sql.php' script to trigger the vulnerability.

Description

Multiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbitrary HTML or web script via (1) a comment for a table name, as exploited through (a) db_operations.php, (2) the db parameter to (b) db_create.php, (3) the newname parameter to db_operations.php, the (4) query_history_latest, (5) query_history_latest_db, and (6) querydisplay_tab parameters to (c) querywindow.php, and (7) the pos parameter to (d) sql.php.

Exploits (4)

exploitdb WORKING POC VERIFIED
by laurent gaffie · textwebappsphp
https://www.exploit-db.com/exploits/29061

This exploit demonstrates an XSS vulnerability in phpMyAdmin by injecting a malicious script into the URL, which executes arbitrary JavaScript in the context of the affected site. It targets the 'table' parameter in the 'sql.php' script to trigger the vulnerability.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: phpMyAdmin (all versions)
Auth required
Prerequisites: Valid session token · Access to the phpMyAdmin interface
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by laurent gaffie · textwebappsphp
https://www.exploit-db.com/exploits/29060

The provided text describes multiple input-validation vulnerabilities in phpMyAdmin, including XSS and information disclosure. It includes a URL example demonstrating potential XSS exploitation via query parameters.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: phpMyAdmin (all versions)
Auth required
Prerequisites: Valid session token · Access to phpMyAdmin interface
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by laurent gaffie · textwebappsphp
https://www.exploit-db.com/exploits/29059

The provided text describes an XSS vulnerability in phpMyAdmin, where an attacker can inject arbitrary script code via the 'newname' parameter in the 'db_operations.php' file. This can lead to cookie theft or site rendering manipulation.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: phpMyAdmin (all versions)
Auth required
Prerequisites: Valid session token · Access to phpMyAdmin interface
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by laurent gaffie · textwebappsphp
https://www.exploit-db.com/exploits/29058

The provided text describes multiple input-validation vulnerabilities in phpMyAdmin, including XSS and information disclosure, but does not contain functional exploit code. It references a URL pattern for potential exploitation but lacks executable PoC.

Classification
Writeup 90%
Attack Type
Xss | Info Leak
Complexity
Trivial
Reliability
Theoretical
Target: phpMyAdmin (all versions)
Auth required
Prerequisites: Valid session token · Access to phpMyAdmin interface
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (7)

Core 7
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-7
Not Applicable vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4572
Permissions Required third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26733
Third Party Advisory mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=116370414309444&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/30310
Third Party Advisory vendor-advisory x_refsource_debian
http://www.us.debian.org/security/2007/dsa-1370
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/21137

Scores

EPSS 0.0319
EPSS Percentile 86.4%

Details

CWE
CWE-79
Status published
Products (11)
debian/debian_linux 3.1
debian/debian_linux 4.0
phpmyadmin/phpmyadmin 2.9.0
phpmyadmin/phpmyadmin 2.9.0.1
phpmyadmin/phpmyadmin 2.9.0.2
phpmyadmin/phpmyadmin 2.9.0.3
phpmyadmin/phpmyadmin 2.9.0_beta1
phpmyadmin/phpmyadmin 2.9.0_rc1
phpmyadmin/phpmyadmin 2.9.1_rc1
phpmyadmin/phpmyadmin 2.9.1_rc2
... and 1 more
Published Jan 19, 2007
Tracked Since Feb 18, 2026