CVE-2006-5116 in phpMyAdmin
요약 (영어)
Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyAdmin before 2.9.1-rc1 allow remote attackers to perform unauthorized actions as another user by (1) directly setting a token in the URL though dynamic variable evaluation and (2) unsetting arbitrary variables via the _REQUEST array, related to (a) libraries/common.lib.php, (b) session.inc.php, and (c) url_generating.lib.php. NOTE: the PHP unset function vector is covered by CVE-2006-3017.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
예약하다
2006. 10. 02.
공개
2006. 10. 03.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 2573 | phpMyAdmin 교차 사이트 요청 위조 | 352 | 입증되지 않음 | 공식 수정 | CVE-2006-5116 |