Description

Cross-site scripting (XSS) vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to inject arbitrary web script or HTML via the sql_query parameter.

Remediation

References

CVE-2006-1803

Related Vulnerabilities

WordPress Plugin Google Analytics MU Cross-Site Request Forgery (2.3.1)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3742)

Jboss EAP Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-7503)

WordPress Plugin User Login History Multiple Cross-Site Scripting Vulnerabilities (1.5.2)

Oracle JRE CVE-2013-0434 Vulnerability (CVE-2013-0434)

Severity

Medium

Classification

CVE-2006-1803

Tags

Missing Update Known Vulnerabilities