CVE-2006-5116: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyAdmin before 2.9.1-rc1 allow remote attackers to perform unauthorized actions as another user by (1) directly setting a token in the URL though dynamic variable evaluation and (2) unsetting arbitrary variables via the REQUEST array, related to (a) libraries/common.lib.php, (b) session.inc.php, and (c) urlgenerating.lib.php. NOTE: the PHP unset function vector is covered by CVE-2006-3017.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5116?
CVE-2006-5116 has a moderate severity level due to its cross-site request forgery vulnerabilities.
How do I fix CVE-2006-5116?
To fix CVE-2006-5116, upgrade to phpMyAdmin version 2.9.1-rc1 or later.
What software versions are affected by CVE-2006-5116?
CVE-2006-5116 affects multiple phpMyAdmin versions including 2.8.1_dev, 2.8.3, and 2.9.0_dev.
Can CVE-2006-5116 lead to unauthorized actions?
Yes, CVE-2006-5116 allows remote attackers to perform unauthorized actions as another user.
Is CVE-2006-5116 related to CSRF vulnerabilities?
Yes, CVE-2006-5116 specifically highlights multiple cross-site request forgery vulnerabilities.