CVE-2007-5589

2007-10-1900:00:00

ubuntu.com

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.011

Percentile

84.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before
2.11.1.2 allow remote attackers to inject arbitrary web script or HTML via
certain input available in (1) PHP_SELF in (a) server_status.php, and (b)
grab_globals.lib.php, © display_change_password.lib.php, and (d)
common.lib.php in libraries/; and certain input available in PHP_SELF and
(2) PATH_INFO in libraries/common.inc.php. NOTE: there might also be other
vectors related to (3) REQUEST_URI.

Bugs

<https://bugs.edge.launchpad.net/ubuntu/+source/phpmyadmin/+bug/162599>

Notes

Author	Note
wgrant	PMASA-2007-6

OSVersionArchitecturePackageVersionFilename
ubuntu7.04noarchphpmyadmin< 4:2.9.1.1-2ubuntu1.1UNKNOWN
ubuntu7.10noarchphpmyadmin< 4:2.10.3-1ubuntu0.1UNKNOWN