Description

Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin 2.8.0.3, 2.8.0.2, 2.8.1-dev, and 2.9.0-dev allows remote attackers to inject arbitrary web script or HTML via the lang parameter.

Remediation

References

CVE-2006-2031

Related Vulnerabilities

WordPress Plugin Titan Anti-spam & Security Security Bypass (7.3.0)

WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder CSV Injection (1.12.22)

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4360)

osCommerce Incorrect Comparison Vulnerability (CVE-2020-23360)

WordPress Plugin OAuth Single Sign On-SSO (OAuth Client) Cross-Site Scripting (6.20.2)

Severity

Low

Classification

CVE-2006-2031

Tags

Missing Update Known Vulnerabilities