Vulnerabilities > CVE-2006-1678 - Unspecified vulnerability in PHPmyadmin

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

phpmyadmin

nessus

NVD

Published: 2006-04-11

Updated: 2024-11-21

Summary

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors in unspecified scripts in the themes directory.

Vulnerable Configurations

Part	Description	Count
Application	Phpmyadmin Phpmyadmin Phpmyadmin 2.1.1 Phpmyadmin Phpmyadmin 2.7.0 Phpmyadmin Phpmyadmin 2.7.0_Pl1 Phpmyadmin Phpmyadmin 2.6.4_Rc1 Phpmyadmin Phpmyadmin 2.2.4 Phpmyadmin Phpmyadmin 2.1.2 Phpmyadmin Phpmyadmin 2.2.0_Rc2 Phpmyadmin Phpmyadmin 2.5.0 Phpmyadmin Phpmyadmin 2.2.0_Rc1 Phpmyadmin Phpmyadmin 2.6.4_Pl1 Phpmyadmin Phpmyadmin 2.0.4 Phpmyadmin Phpmyadmin 2.6.1 Phpmyadmin Phpmyadmin 2.6.1_Pl3 Phpmyadmin Phpmyadmin 2.3.1 Phpmyadmin Phpmyadmin 2.7.0_Pl2 Phpmyadmin Phpmyadmin 2.0.2 Phpmyadmin Phpmyadmin 2.5.5_Rc1 Phpmyadmin Phpmyadmin 2.6.0_Pl3 Phpmyadmin Phpmyadmin 2.6.4_Pl4 Phpmyadmin Phpmyadmin 2.5.3 Phpmyadmin Phpmyadmin 2.2.5 Phpmyadmin Phpmyadmin 2.5.4 Phpmyadmin Phpmyadmin 2.2.0_Rc3 Phpmyadmin Phpmyadmin 2.3.2 Phpmyadmin Phpmyadmin 2.6.0_Pl2 Phpmyadmin Phpmyadmin 2.5.1 Phpmyadmin Phpmyadmin 2.6.2 Phpmyadmin Phpmyadmin 2.0.1 Phpmyadmin Phpmyadmin 2.5.2 Phpmyadmin Phpmyadmin 2.1.0 Phpmyadmin Phpmyadmin 2.6.4_Pl3 Phpmyadmin Phpmyadmin 2.6.0_Pl1 Phpmyadmin Phpmyadmin 2.2.6 Phpmyadmin Phpmyadmin 2.2.0_Pre1 Phpmyadmin Phpmyadmin 2.6.1_Pl1 Phpmyadmin Phpmyadmin 2.0.3 Phpmyadmin Phpmyadmin 2.5.6_Rc1 Phpmyadmin Phpmyadmin 2.6.2_Rc1 Phpmyadmin Phpmyadmin 2.5.7 Phpmyadmin Phpmyadmin 2.5.5 Phpmyadmin Phpmyadmin 2.4.0 Phpmyadmin Phpmyadmin 2.5.7_Pl1 Phpmyadmin Phpmyadmin 2.2.2 Phpmyadmin Phpmyadmin 2.2.0 Phpmyadmin Phpmyadmin 2.2.3 Phpmyadmin Phpmyadmin 2.5.5_Rc2 Phpmyadmin Phpmyadmin 2.0.0 Phpmyadmin Phpmyadmin 2.2.0_Pre2 Phpmyadmin Phpmyadmin 2.6.3_Pl1 Phpmyadmin Phpmyadmin 2.6.1_Rc1 Phpmyadmin Phpmyadmin 2.7.0_Beta1 Phpmyadmin Phpmyadmin 2.5.5_Pl1 Phpmyadmin Phpmyadmin 2.0.5	53

Nessus

NASL family	Debian Local Security Checks
NASL id	DEBIAN_DSA-1207.NASL
description	The phpmyadmin update in DSA 1207 introduced a regression. This update corrects this flaw. For completeness, please find below the original advisory text : Several remote vulnerabilities have been discovered in phpMyAdmin, a program to administrate MySQL over the web. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3621 CRLF injection vulnerability allows remote attackers to conduct HTTP response splitting attacks. - CVE-2005-3665 Multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_HOST variable and (2) various scripts in the libraries directory that handle header generation. - CVE-2006-1678 Multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary web script or HTML via scripts in the themes directory. - CVE-2006-2418 A cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the db parameter of footer.inc.php. - CVE-2006-5116 A remote attacker could overwrite internal variables through the _FILES global variable.
last seen	2020-06-01
modified	2020-06-02
plugin id	23656
published	2006-11-20
reporter	This script is Copyright (C) 2006-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/23656
title	Debian DSA-1207-2 : phpmyadmin - several vulnerabilities

Summary

Vulnerable Configurations

Nessus

References