NVD

Id
69947  
Name
CVE-2005-4349  
Description
** DISPUTED ** SQL injection vulnerability in server_privileges.php in phpMyAdmin 2.7.0 allows remote authenticated users to execute arbitrary SQL commands via the (1) dbname and (2) checkprivs parameters. NOTE: the vendor and a third party have disputed this issue, saying that the main task of the program is to support query execution by authenticated users, and no external attack scenario exists without an auto-login configuration. Thus it is likely that this issue will be REJECTED. However, a closely related CSRF issue has been assigned CVE-2005-4450.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-12-19  
Modified Date
2016-10-17  
Seq
2005-4349  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
361228 69947 CVE-2005-4349 20051217 phpMyAdmin server_privileges.php SQL Injection Vulnerabilities.  View
361229 69947 CVE-2005-4349 270  View
361230 69947 CVE-2005-4349 20051219 Re: phpMyAdmin server_privileges.php SQL Injection Vulnerabilities.  View
361231 69947 CVE-2005-4349 20051219 about phpMyAdmin"s server_privileges.php announced vulnerability  View
361232 69947 CVE-2005-4349 ADV-2005-2995  View

Related JVN