Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2005-0992 — Cross-site Scripting in Phpmyadmin

CWE-79 — Cross-site Scripting13 documents5 sources
Severity
6.8MEDIUMNVD
NVD4.3NVD2.6OSV4.3
EPSS
10.2%
top 6.86%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
PhpmyadminDebian Phpmyadmin
Timeline
PublishedMay 2
Latest updateMay 1

Description

Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages3 packages

▶debiandebian/phpmyadmin< phpmyadmin 3:2.6.2-rc1-1 (bookworm)+2
▶Debianphpmyadmin/phpmyadmin< 3:2.6.2-rc1-1+11
▶NVDphpmyadmin/phpmyadmin2.11.2.1+100

Patches

Patch: www.gentoo.org ↗Patch: www.securityfocus.com ↗Patch: www.gentoo.org ↗

🔴Vulnerability Details

6
GHSA
GHSA-6723-jq8x-794g: Cross-site scripting (XSS) vulnerability in phpMyAdmin 2↗2022-05-01
▶
GHSA
GHSA-hq77-gw5q-x5p4: Cross-site scripting (XSS) vulnerability in libraries/auth/cookie↗2022-05-01
▶
GHSA
GHSA-8wqv-f9xx-xf24: Cross-site scripting (XSS) vulnerability in index↗2022-05-01
▶
OSV
CVE-2007-6100: Cross-site scripting (XSS) vulnerability in libraries/auth/cookie↗2007-11-23
▶
OSV
CVE-2007-0341: Cross-site scripting (XSS) vulnerability in phpMyAdmin 2↗2007-01-18
▶

💥Exploits & PoCs

1
Exploit-DB
phpMyAdmin 2.x - Convcharset Cross-Site Scripting↗2005-04-03
▶

📋Vendor Advisories

3
Debian
CVE-2007-0341: phpmyadmin - Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.1 and earlier, when M...↗2007
▶
Debian
CVE-2007-6100: phpmyadmin - Cross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php i...↗2007
▶
Debian
CVE-2005-0992: phpmyadmin - Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2...↗2005
▶