EDB-27632

functional

phpMyAdmin 2.7 - 'sql.php' Cross-Site Scripting

view exploit source exploit_dbverifiedtype webappsauthor p0w3rpublished 2005-10-31catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2006-1803USmedium4.3Exploit
Cross-site scripting (XSS) vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to inject arbitrary web script or HTML via the sql_query parameter.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan