Vulnerability in Gentoo Linux
CVE-2004-1055
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PmaAbsoluteUri parameter, (2) the zero_rows parameter in read_dump.php, (3) the confirm form, or (4) an error message generated by the internal phpMyAdmin parser.
EPSS: 0.015 (71.2th percentile) — read the EPSS interpretation.
Affected products
- Gentoo Linux — versions 1.4
- Phpmyadmin — versions 2.5.0, 2.5.1, 2.5.2
- N/a — versions n/a
References
- cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Exploit)
- cve@mitre.org (vdb-entry, x_refsource_XF)