CVE:CVE-2006-6374
CNNVD:CNNVD-200612-159
PhpMyAdmin 2.7.0-pl2存在多个CRLF注入漏洞，远程攻击者可通过在(1)css/phpmyadmin.css.php，(2)db_create.php，(3)index.php，(4)left.php，(5)libraries/session.inc.php，(6)libraries/transformations/overview.php，(7)querywindow.php，(8)server_engines.php，及其他文件中的phpMyAdmin cookie中的CRLF序列来注入任意HTTP报头并执行HTTP响应拆分攻击。
solution:Upgrade phpmyadmin phpmyadmin to a higher version than 2.7.0_pl2,and avoid the version 2.7.0_pl2