CVE-2006-3301: Multiple cross-site scripting (XSS) vulnerabilities in phpQLAdmin 2.2.7 and earlier allow remote attackers...

Security readout for executives and security teams

CVE-2006-3301 is a cross-site scripting issue in phpQLAdmin 2.2.7 and earlier. A remote attacker could inject script or HTML through the domain field in two admin-related pages. The source bundle does not provide CVSS scoring, patch details, or evidence of active exploitation. Exposure is likely limited to organizations still running phpQLAdmin 2.2.7 or earlier. Risk increases if those pages are reachable by untrusted users or exposed on the public internet. The bundle does not show product prevalence or maintained vendor status. Prioritize this for legacy-system review rather than emergency response. It is old and lacks active-exploitation evidence, but exposed administrative web tools with XSS can still create account and session risk. Mitigation focus: Identify and remove unused phpQLAdmin deployments.; Restrict phpQLAdmin access to trusted administrators and networks.; Check vendor or project guidance for any available fixed release..

Prepared

Jun 29, 2026, 11:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.