PT-2005-5133 · Php · Phpmyadmin

Published 2005-12-21 · Updated 2025-01-16 · CVE-2005-4450

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpMyAdmin version 2.7.0

Description A cross-site request forgery (CSRF) issue allows remote attackers to perform unauthorized actions as a logged-in user. This can be achieved via a link or IMG tag to "server privileges.php", utilizing the dbname and checkprivs parameters.

Recommendations For phpMyAdmin version 2.7.0, consider disabling access to the "server privileges.php" page until a patch is available. Restrict the use of the dbname and checkprivs parameters in the affected API endpoint to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-4450

Affected Products

Phpmyadmin

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-4450 · Security Note
• http://secunia.com/advisories/18113 · Vendor Advisory
• https://t.me/cvenotify/107697 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4450 · Note