CVE-2004-1055

MEDIO 6.8CVE-2004-1055 · Published 01/03/2005 · updated 16/06/2026

En resumen

CVE-2004-1055 es una vulnerabilidad MEDIO (CVSS 6.8) que afecta a phpmyadmin (phpmyadmin).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.5%, mayor que el 73.9% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
phpmyadmin phpmyadmin	`= 2.5.0= 2.5.1= 2.5.2= 2.5.4= 2.5.5= 2.5.5_pl1= 2.5.5_rc1= 2.5.5_rc2= 2.5.6_rc1= 2.5.7= 2.5.7_pl1= 2.6.0_pl1= 2.6.0_pl2`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PmaAbsoluteUri parameter, (2) the zero_rows parameter in read_dump.php, (3) the confirm form, or (4) an error message generated by the internal phpMyAdmin parser.

References

netvigilance.com/html/advisory0005.htm · Exploit
phpmyadmin.net/home_page/security.php · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/18158

Más vulnerabilidades de phpmyadmin

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

phpmyadmin

= 2.5.0= 2.5.1= 2.5.2= 2.5.4= 2.5.5= 2.5.5_pl1= 2.5.5_rc1= 2.5.5_rc2= 2.5.6_rc1= 2.5.7= 2.5.7_pl1= 2.6.0_pl1= 2.6.0_pl2

No fix yet

Description

Más vulnerabilidades de phpmyadmin

Ver todo →