CVE-2006-2418

N/A Unknown

Published: May 16, 2006 Modified: April 16, 2026

Description

Cross-site scripting (XSS) vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to inject arbitrary web script or HTML via the db parameter in unknown scripts.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html

Source: cve@mitre.org

Patch

http://secunia.com/advisories/20113

Source: cve@mitre.org

Patch Vendor Advisory

http://secunia.com/advisories/20627

Source: cve@mitre.org

Patch Vendor Advisory

http://secunia.com/advisories/22781

Source: cve@mitre.org

Patch Vendor Advisory

http://www.debian.org/security/2006/dsa-1207

Source: cve@mitre.org

Patch Vendor Advisory

http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-2

Source: cve@mitre.org

Patch Vendor Advisory

http://www.securityfocus.com/bid/17973

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/1794

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26441

Source: cve@mitre.org

http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html