{"id":"GHSA-wj42-52pv-wfj2","summary":"phpMyAdmin CRLF Injection Vulnerability","details":"CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts.","aliases":["CVE-2005-3621"],"modified":"2023-11-01T05:42:34.018566Z","published":"2022-05-01T02:19:36Z","database_specific":{"cwe_ids":[],"severity":"MODERATE","github_reviewed":true,"github_reviewed_at":"2023-09-18T23:46:33Z","nvd_published_at":"2005-11-16T11:02:00Z"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3621"},{"type":"WEB","url":"https://web.archive.org/web/20060514052317/http://securitytracker.com/alerts/2005/Nov/1015213.html"},{"type":"WEB","url":"https://web.archive.org/web/20061015000000*/http://www.novell.com/linux/security/advisories/2005_28_sr.html"},{"type":"WEB","url":"https://www.debian.org/security/2006/dsa-1207"},{"type":"WEB","url":"https://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-6"}],"affected":[{"package":{"name":"phpmyadmin/phpmyadmin","ecosystem":"Packagist","purl":"pkg:composer/phpmyadmin/phpmyadmin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-pl4"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-wj42-52pv-wfj2/GHSA-wj42-52pv-wfj2.json"}}],"schema_version":"1.9.0"}