CVE-2006-3388
published 2006-07-06CVE-2006-3388: Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the table parameter.
PriorityP420medium5.8CVSS 2.0
AVNACMAuNCPIPAN
EPSS
1.73%
75.0th percentile
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the table parameter.
Affected
60 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | phpmyadmin | < phpmyadmin 4:2.8.2-0.1 (bookworm) | phpmyadmin 4:2.8.2-0.1 (bookworm) |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
CVSS provenance
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
osv5.8MEDIUM
vendor_debian5.8LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8c4c-pxpc-3vv4: Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2
ghsa_unreviewed·2022-05-01
CVE-2006-3388 [MEDIUM] GHSA-8c4c-pxpc-3vv4: Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the table parameter.
OSV
CVE-2006-3388: Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2
osv·2006-07-06·CVSS 5.8
CVE-2006-3388 [MEDIUM] CVE-2006-3388: Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the table parameter.
Debian
CVE-2006-3388: phpmyadmin - Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 allows remot...
vendor_debian·2006·CVSS 5.8
CVE-2006-3388 [MEDIUM] CVE-2006-3388: phpmyadmin - Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 allows remot...
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the table parameter.
Scope: local
bookworm: resolved (fixed in 4:2.8.2-0.1)
bullseye: resolved (fixed in 4:2.8.2-0.1)
forky: resolved (fixed in 4:2.8.2-0.1)
sid: resolved (fixed in 4:2.8.2-0.1)
trixie: resolved (fixed in 4:2.8.2-0.1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.htmlhttp://secunia.com/advisories/20907http://secunia.com/advisories/23086http://securitynews.ir/advisories/phpmyadmin281.txthttp://securityreason.com/securityalert/1194http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-4http://www.securityfocus.com/archive/1/438870/100/0/threadedhttp://www.securityfocus.com/bid/18754http://www.vupen.com/english/advisories/2006/2622https://exchange.xforce.ibmcloud.com/vulnerabilities/27493http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.htmlhttp://secunia.com/advisories/20907http://secunia.com/advisories/23086http://securitynews.ir/advisories/phpmyadmin281.txthttp://securityreason.com/securityalert/1194http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-4http://www.securityfocus.com/archive/1/438870/100/0/threadedhttp://www.securityfocus.com/bid/18754http://www.vupen.com/english/advisories/2006/2622https://exchange.xforce.ibmcloud.com/vulnerabilities/27493
2006-07-06
Published