Search for vulnerabilities
Vulnerability details: VCID-3k53-dx5k-9udy
Vulnerability ID VCID-3k53-dx5k-9udy
Aliases CVE-2005-3621
GHSA-wj42-52pv-wfj2
Summary CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00596 https://api.first.org/data/v1/epss?cve=CVE-2005-3621
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-wj42-52pv-wfj2
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2005-3621
generic_textual MODERATE https://web.archive.org/web/20060514052317/http://securitytracker.com/alerts/2005/Nov/1015213.html
generic_textual MODERATE https://web.archive.org/web/20061015000000*/http://www.novell.com/linux/security/advisories/2005_28_sr.html
generic_textual MODERATE https://www.debian.org/security/2006/dsa-1207
generic_textual MODERATE https://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-6
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2005-3621
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3621
https://web.archive.org/web/20060514052317/http://securitytracker.com/alerts/2005/Nov/1015213.html
https://web.archive.org/web/20061015000000*/http://www.novell.com/linux/security/advisories/2005_28_sr.html
https://www.debian.org/security/2006/dsa-1207
https://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-6
339437 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=339437
CVE-2005-3621 https://nvd.nist.gov/vuln/detail/CVE-2005-3621
GHSA-wj42-52pv-wfj2 https://github.com/advisories/GHSA-wj42-52pv-wfj2
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.68676
EPSS Score 0.00596
Published At Dec. 19, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-12-19T17:41:26.942863+00:00 Debian Importer Import https://security-tracker.debian.org/tracker/data/json 37.0.0