CVE

Id
25602  
CVE No.
CVE-2007-2245  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.10.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the fieldkey parameter to browse_foreigners.php or (2) certain input to the PMA_sanitize function.  
Phase
Assigned (20070425)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
255899 25602 CVE-2007-2245 CONFIRM:http://www.phpmyadmin.net/ChangeLog.txt  View
255900 25602 CVE-2007-2245 CONFIRM:http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0  View
255901 25602 CVE-2007-2245 DEBIAN:DSA-1370  View
255902 25602 CVE-2007-2245 URL:http://www.us.debian.org/security/2007/dsa-1370  View
255903 25602 CVE-2007-2245 MANDRIVA:MDKSA-2007:199  View
255904 25602 CVE-2007-2245 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:199  View
255905 25602 CVE-2007-2245 VUPEN:ADV-2007-1508  View
255906 25602 CVE-2007-2245 URL:http://www.vupen.com/english/advisories/2007/1508  View
255907 25602 CVE-2007-2245 OSVDB:35050  View
255908 25602 CVE-2007-2245 URL:http://osvdb.org/35050  View
255909 25602 CVE-2007-2245 SECUNIA:24952  View
255910 25602 CVE-2007-2245 URL:http://secunia.com/advisories/24952  View
255911 25602 CVE-2007-2245 SECUNIA:26733  View
255912 25602 CVE-2007-2245 URL:http://secunia.com/advisories/26733  View
255913 25602 CVE-2007-2245 XF:phpmyadmin-fieldkey-xss(33898)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56758 JVNDB-2007-005450 phpMySpace の modules/news/article.php における SQL インジェクションの脆弱性 phpMySpace の modules/news/article.php には、SQL インジェクションの脆弱性が存在します。 CVE-2007-2247 25602 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005450.html  View