Vulnerabilities > CVE-2006-1804 - Unspecified vulnerability in PHPmyadmin 2.7.0Pl1/2.8.0.3

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
phpmyadmin
nessus
NVD
Published: 2006-04-18
Updated: 2024-11-21

Summary

SQL injection vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to execute arbitrary SQL commands via the sql_query parameter.

Vulnerable Configurations

Part Description Count
Application
Phpmyadmin
2

Nessus

NASL familyFreeBSD Local Security Checks
NASL idFREEBSD_PKG_2ECD02E2E86411DAB9F400123FFE8333.NASL
descriptionphpMyAdmin security team reports : It was possible to inject arbitrary SQL commands by forcing an authenticated user to follow a crafted link. Such issue is quite common in many PHP applications and users should take care what links they follow. We consider these vulnerabilities to be quite dangerous.
last seen2020-06-01
modified2020-06-02
plugin id21577
published2006-05-22
reporterThis script is Copyright (C) 2006-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
sourcehttps://www.tenable.com/plugins/nessus/21577
titleFreeBSD : phpmyadmin -- CSRF vulnerabilities (2ecd02e2-e864-11da-b9f4-00123ffe8333)

References