UpHeron
All vulnerabilities

Servers and applications

CVE-2005-4450

Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.7.0 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag to server_privileges.php, as demonstrated using the dbname and checkprivs parameters. NOTE: the provenance of this issue is unknown, although third parties imply that it is related to the disclosure of CVE-2005-4349, which was…

Severity
High 7.5
Published
21 Dec 2005
Last changed
16 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
1.2% in the next 30 daysHigher than 67% of CVEs. EPSS by FIRST, 12 Nov 2026
Attack
Over the network · No login needed
Attacker can
Read some data · Change some data · Slow it down
CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Sources
NVD

Description

Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.7.0 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag to server_privileges.php, as demonstrated using the dbname and checkprivs parameters. NOTE: the provenance of this issue is unknown, although third parties imply that it is related to the disclosure of CVE-2005-4349, which was labeled as SQL injection but disputed.

From NVD.

Affected software

SoftwareAffected versions
phpMyAdminServers and applications · cpe:a:phpmyadmin:phpmyadmin
  • Version 2.7.0_pl1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2005-4450
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2005-4450