CVE-2006-5718

Severity Score

4.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Cross-site scripting (XSS) vulnerability in error.php in phpMyAdmin 2.6.4 through 2.9.0.2 allows remote attackers to inject arbitrary web script or HTML via UTF-7 or US-ASCII encoded characters, which are injected into an error message, as demonstrated by a request with a utf7 charset parameter accompanied by UTF-7 data.

Vulnerabilidad de secuencias de comandos (XSS) en error.php en phpMyAdmin 2.6.4 hasta la 2.9.0.2 permite a un atacante remoto inyectar secuencias de comandos web o HTML a través de codificaciones de caracteres UTF-7 or US-ASCII, lo cual son inyectados dentro de un mensaje de error, como se demostró por una respuesta con un el parámetro utf7 acompañado por datos UTF-7.

*Credits: N/A

CVSS Scores

NISTv2 4.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-11-03 CVE Reserved
2006-11-04 CVE Published
2023-12-30 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (9)

URL	Tag	Source
http://secunia.com/advisories/23086	Third Party Advisory
http://www.securityfocus.com/archive/1/450397/100/0/threaded	Mailing List
http://www.vupen.com/english/advisories/2006/4298	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/29957	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/22599	2018-10-17
http://www.hardened-php.net/advisory_122006.137.html	2018-10-17
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-6	2018-10-17
http://www.securityfocus.com/bid/20856	2018-10-17

URL	Date	SRC
http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html	2018-10-17

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Phpmyadmin Search vendor "Phpmyadmin"		Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin"				2.6.4_pl1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.6.4_pl1"		-		Affected
Phpmyadmin Search vendor "Phpmyadmin"		Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin"				2.6.4_pl3 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.6.4_pl3"		-		Affected
Phpmyadmin Search vendor "Phpmyadmin"		Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin"				2.6.4_pl4 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.6.4_pl4"		-		Affected
Phpmyadmin Search vendor "Phpmyadmin"		Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin"				2.6.4_rc1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.6.4_rc1"		-		Affected
Phpmyadmin Search vendor "Phpmyadmin"		Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin"				2.7 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.7"		-		Affected
Phpmyadmin Search vendor "Phpmyadmin"		Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin"				2.7.0_beta1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.7.0_beta1"		-		Affected
Phpmyadmin Search vendor "Phpmyadmin"		Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin"				2.7_pl1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.7_pl1"		-		Affected
Phpmyadmin Search vendor "Phpmyadmin"		Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin"				2.8.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.8.1"		-		Affected
Phpmyadmin Search vendor "Phpmyadmin"		Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin"				2.8.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.8.2"		-		Affected
Phpmyadmin Search vendor "Phpmyadmin"		Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin"				2.8.3 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.8.3"		-		Affected
Phpmyadmin Search vendor "Phpmyadmin"		Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin"				2.8.4 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.8.4"		-		Affected
Phpmyadmin Search vendor "Phpmyadmin"		Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin"				2.9 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.9"		-		Affected
Phpmyadmin Search vendor "Phpmyadmin"		Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin"				2.9.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.9.1"		-		Affected
Phpmyadmin Search vendor "Phpmyadmin"		Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin"				2.9.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.9.2"		-		Affected
Phpmyadmin Search vendor "Phpmyadmin"		Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin"				2.9_rc1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.9_rc1"		-		Affected