← back
CVE-2007-5386

CVE-2007-5386

EPSS 3.3%
Cross-site scripting (XSS) vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that does not URL-encode requests, allows remote attackers to inject arbitrary web script or HTML via the query string.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/30653unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://osvdb.org/37678http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_2_11_1/phpMyAdmin/ChangeLog?r1=10748&r2=10747&pathrev=10748http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/trunk/?view=loghttps://bugzilla.redhat.com/show_bug.cgi?id=333661http://secunia.com/advisories/27173http://secunia.com/advisories/27506http://secunia.com/advisories/27595https://exchange.xforce.ibmcloud.com/vulnerabilities/37077https://sourceforge.net/tracker/index.php?func=detail&aid=1810629&group_id=23067&atid=377408https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00040.htmlhttp://www.debian.org/security/2007/dsa-1403http://www.digitrustgroup.com/advisories/TDG-advisory071009a