CVE-2006-5718

Name of the Vulnerable Software and Affected Versions: phpMyAdmin versions 2.6.4 through 2.9.0.2

Description: A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via UTF-7 or US-ASCII encoded characters. These characters are injected into an error message. For example, this can be achieved by sending a request with a utf7 charset parameter accompanied by UTF-7 data.

Recommendations: For phpMyAdmin versions 2.6.4 through 2.9.0.2, update to a version that includes a fix for this issue to prevent exploitation.