CVE

Id
27663  
CVE No.
CVE-2007-4306  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.10.3 allow remote attackers to inject arbitrary web script or HTML via the (1) unlim_num_rows, (2) sql_query, or (3) pos parameter to (a) tbl_export.php; the (4) session_max_rows or (5) pos parameter to (b) sql.php; the (6) username parameter to (c) server_privileges.php; or the (7) sql_query parameter to (d) main.php. NOTE: vector 5 might be a regression or incomplete fix for CVE-2006-6942.7.  
Phase
Assigned (20070813)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
284720 27663 CVE-2007-4306 MISC:http://pridels-team.blogspot.com/2007/08/phpmyadmin-multiple-xss-vuln.html  View
284721 27663 CVE-2007-4306 MANDRIVA:MDKSA-2007:199  View
284722 27663 CVE-2007-4306 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:199  View
284723 27663 CVE-2007-4306 BID:25268  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52212 JVNDB-2007-000902 Linux Kernel の aacraid ドライバにおける権限昇格の脆弱性 Linux Kernel の aacraid ドライバには、SCSI レイヤー ioctl パスの aac_cfg_open() 関数および aac_compat_ioctl() 関数において、ioctl のリクエストの権限を適切に処理しないために、権限昇格の脆弱性が存在します。 CVE-2007-4308 27663 1.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000902.html  View