CVE-2006-6374

CVE-2006-6374 describes multiple CRLF injection vulnerabilities in PhpMyAdmin 2.7.0-pl2, allowing remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks. This is achieved by inserting CRLF sequences into a phpMyAdmin cookie, affecting various files such as css/phpmyadmin.css.php and index.php. With a CVSS score of 7.5, this vulnerability is considered highly severe, as it can be exploited remotely with low complexity and without authentication, potentially leading to partial compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.