Title : phpMyAdmin Multiple Scripts HTTP Response Splitting Vulnerability VUPEN ID : VUPEN/ADV-2005-2439 CVE ID : CVE-2005-3621 - CVE-2005-3622
Rated as : Low Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2005-11-15
Technical Description
A vulnerability has been identified in phpMyAdmin, which may be exploited to conduct HTTP response splitting attacks. This flaw is due to input validation errors in various scripts that do not properly validate certain parameters, which may be exploited by a remote attackers to inject malicious HTTP headers and cause arbitrary scripting code to be executed by the user's browser.
