Vulnerability Details CVE-2005-3621
CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.2%
CVSS Severity
CVSS v2 Score 5.0
References
- http://secunia.com/advisories/17578
- http://secunia.com/advisories/22781
- http://securitytracker.com/id?1015213
- http://www.debian.org/security/2006/dsa-1207
- http://www.novell.com/linux/security/advisories/2005_28_sr.html
- http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-6
- http://secunia.com/advisories/17578
- http://secunia.com/advisories/22781
- http://securitytracker.com/id?1015213
- http://www.debian.org/security/2006/dsa-1207
- http://www.novell.com/linux/security/advisories/2005_28_sr.html
- http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-6
Products affected by CVE-2005-3621
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.7_pl1
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2_pl1
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc2
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl3
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_pl1
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3_pl1
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl3