CVE:CVE-2006-6942
CNNVD:CNNVD-200701-293
PhpMyAdmin 2.9.1.1之前版本中存在多个跨站攻击漏洞。远程攻击者可以借助(1)利用(a)db_operations.php对表格名进行的评论，提交到(b)db_create.php的(2)db参数，到db_operations.php的(3)新名字参数，到(c)querywindow.php的(4)query_history_latest,(5)query_history_latest_db和(6)querydisplay_tabanshu以及到(d)sql.php的(7)pos参数，注入任意的HTML或web脚本。
solution:Upgrade phpmyadmin phpmyadmin to a higher version than 2.9.1,2.9.0,2.9.0.1,2.9.0.2,2.9.0.3,2.9.0_beta1,2.9.0_rc1,2.9.1_rc1,2.9.1_rc2,and avoid the version (,2.9.1],2.9.0,2.9.0.1,2.9.0.2,2.9.0.3,2.9.0_beta1,2.9.0_rc1,2.9.1_rc1,2.9.1_rc2; Upgrade debian debian_linux to a higher version than 3.1,4.0,and avoid the version 3.1,4.0