CVE-2004-1055

5 documents5 sources
Severity
6.8MEDIUM
EPSS
1.2%
top 21.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Gentoo LinuxPhpmyadmin Phpmyadmin
Timeline
PublishedMar 1
Latest updateApr 29

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PmaAbsoluteUri parameter, (2) the zero_rows parameter in read_dump.php, (3) the confirm form, or (4) an error message generated by the internal phpMyAdmin parser.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages3 packages

▶Debianphpmyadmin< 2:2.6.0-pl3-1+3
▶NVDphpmyadmin/phpmyadmin13 versions+12
▶NVDgentoo/linux1.4

🔴Vulnerability Details

3
GHSA
GHSA-pfw8-43jj-c4g3: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2↗2022-04-29
▶
OSV
CVE-2004-1055: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2↗2005-03-01
▶
CVEList
CVE-2004-1055: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2↗2004-11-24
▶

📋Vendor Advisories

1
Debian
CVE-2004-1055: phpmyadmin - Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and ...↗2004
▶