GHSA-wj42-52pv-wfj2

phpMyAdmin CRLF Injection Vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2005-3621

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	phpmyadmin/phpmyadmin	< 2.6.4-pl4	2.6.4-pl4

Details

As written in the advisory (Markdown source, shown as plain text).

CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2005-3621 advisory
https://web.archive.org/web/20060514052317/http://securitytracker.com/alerts/2005/Nov/1015213.html web
https://web.archive.org/web/20061015000000*/http://www.novell.com/linux/security/advisories/2005_28_sr.html web
https://www.debian.org/security/2006/dsa-1207 web
https://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-6 web