PT-2006-6887 · Phpmyadmin+1 · Phpmyadmin+1

Vincent Audet Menard · Publicado 2006-12-04 · Atualizado 2018-10-17 · CVE-2006-6258

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AlternC versions 0.9.5 and earlier

Description The issue concerns the transmission of the SQL password in cleartext within a cookie by the phpmyadmin subsystem. This could potentially allow remote attackers to obtain the password through sniffing or by exploiting a cross-site scripting (XSS) attack.

Recommendations For AlternC versions 0.9.5 and earlier, consider disabling the phpmyadmin subsystem until a secure version is available. Restrict access to sensitive areas of the application to minimize the risk of exploitation. Avoid using the affected subsystem in insecure networks to reduce the risk of password sniffing.

Exploit

Correção

Identificadores relacionados

CVE-2006-6258

Produtos afetados

Alternc

Phpmyadmin

Referências · 8

• 🔥 http://ground418.org/exploits/read.php?file=06-alternC-095.txt · Exploit
• 🔥 http://securityfocus.com/bid/21355 · Exploit
• http://securityreason.com/securityalert/1965 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6258 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30625 · Nota
• http://secunia.com/advisories/23144 · Nota
• http://securityfocus.com/archive/1/452988/100/0/threaded · Nota
• http://vupen.com/english/advisories/2006/4851 · Nota