| Package | Affected versions | Patched versions |
|---|---|---|
| phpmyadmin | = 2.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.1= 2.1.1= 2.1.2= 2.2= 2.2.2= 2.2.3= 2.2.4= 2.2.5= 2.2.6= 2.2_pre1= 2.2_pre2= 2.2_rc1= 2.2_rc2= 2.2_rc3= 2.3.1= 2.3.2= 2.4.0= 2.5.0= 2.5.1= 2.5.2= 2.5.3= 2.5.4= 2.5.5= 2.5.5_pl1= 2.5.5_rc1= 2.5.5_rc2= 2.5.6_rc1= 2.5.7= 2.5.7_pl1= 2.6.0_pl1= 2.6.0_pl2= 2.6.0_pl3= 2.6.1= 2.6.1_pl1= 2.6.1_pl3= 2.6.1_rc1= 2.6.2= 2.6.2_rc1= 2.6.3_pl1= 2.6.4_pl1= 2.6.4_pl3= 2.6.4_rc1= 2.7.0_beta1 |
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_HOST variable and (2) various scripts in the libraries directory that handle header generation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free