Intrusion PreventionphpMyAdmin.Error.php.XSS
Description
It indicates an attacker attempted to exploit a HTML Injection vulnerability in phpMyAdmin.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. An attacker can exploit this by tricking an unsuspecting user into visiting a malicious webpage, leading to other attacks.
Affected Products
phpMyAdmin phpMyAdmin 2.6.3 -pl1 and earlier versions.
Impact
System Compromise: Remote attackers can execute arbitrary script code within the context of the target user's browser.
Recommended Actions
Apply appropriate patch from the vendor or Upgrade to non-vulnerable version if available.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-11-22 | 15.729 | Name:PHPMyAdmin. Error. php. XSS:phpMyAdmin. Error. php. XSS |
| ID | 11311 |
| Created | Nov 07, 2005 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2005-2869 |
| Exploit Prediction Score | 32.78% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | PHP_app |