CVE-2007-4306

2007-08-1300:00:00

ubuntu.com

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.008

Percentile

82.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.10.3
allow remote attackers to inject arbitrary web script or HTML via the (1)
unlim_num_rows, (2) sql_query, or (3) pos parameter to (a) tbl_export.php;
the (4) session_max_rows or (5) pos parameter to (b) sql.php; the (6)
username parameter to © server_privileges.php; or the (7) sql_query
parameter to (d) main.php. NOTE: vector 5 might be a regression or
incomplete fix for CVE-2006-6942.7.