CVE-2005-3787
Published Nov 24, 2005
Last updated 6 years ago
Overview
- Description
- Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl4 allow remote attackers to inject arbitrary web script or HTML via (1) the cookie-based login panel, (2) the title parameter and (3) the table creation dialog.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C3663CE-AF25-4A0A-811E-DE58B7E5D934"
},
{
"criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.7_pl1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADDE752A-19A1-4910-9C56-0FDFFA367E30"
},
{
"criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2_pl1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "701F99C8-D803-4D28-AFDA-B3DB5EBD5EEA"
},
{
"criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A47F3385-8681-4A7D-BF64-8F6EA7FBDFE3"
},
{
"criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D2E7577-5F89-4B2C-9C28-A5268B539968"
},
{
"criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F86B56F-510F-4C6F-A259-6200DC2B05ED"
},
{
"criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F6E3468-78AF-471C-A09E-1ACCC6867256"
},
{
"criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99FD7D45-135D-4AE7-83E0-FDFE436DFE4E"
},
{
"criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFB3EBBF-E696-48D1-B3BA-B3C88C050F12"
},
{
"criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "794AE77E-843C-4CB4-9462-E4FE8C4C2896"
},
{
"criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_pl1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCE1E983-6EA4-4E0F-B7F8-B0070F8A3752"
},
{
"criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3_pl1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1600D28-5583-4FA2-835F-BCE10813DB61"
},
{
"criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6758F7AC-0FCF-4F6C-8F40-DDF1BA998AB9"
}
],
"operator": "OR"
}
]
}
]