Description

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_HOST variable and (2) various scripts in the libraries directory that handle header generation.

Remediation

References

CVE-2005-3665

Related Vulnerabilities

WordPress Plugin bodi0`s Bots visits counter Cross-Site Scripting (0.8.1)

MySQL CVE-2021-2305 Vulnerability (CVE-2021-2305)

WordPress Plugin Tablesome-Responsive Table, Woocommerce Automation, Email Log, Form Automation-Contact Form 7, Elementor, WPForms, Forminator Cross-Site Request Forgery (1.0.25)

WordPress Plugin Ultimate Responsive Image Slider Unspecified Vulnerability (3.3.2)

Roundcube Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5382)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2005-3665