Lucene search

K
cve[email protected]CVE-2007-5728
HistoryOct 30, 2007 - 9:46 p.m.

CVE-2007-5728

2007-10-3021:46:00
CWE-79
web.nvd.nist.gov
37
cve-2007-5728
phppgadmin
xss
vulnerability
web script
html
remote attackers
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.9%

Cross-site scripting (XSS) vulnerability in phpPgAdmin 3.5 to 4.1.1, and possibly 4.1.2, allows remote attackers to inject arbitrary web script or HTML via certain input available in PHP_SELF in (1) redirect.php, possibly related to (2) login.php, different vectors than CVE-2007-2865.

Affected configurations

NVD
Node
phppgadminphppgadminMatch3.5
OR
phppgadminphppgadminMatch3.5.2
OR
phppgadminphppgadminMatch3.5.3
OR
phppgadminphppgadminMatch4.1.1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.9%