CVE

Id
29457  
CVE No.
CVE-2007-6100  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin before 2.11.2.2, when logins are authenticated with the cookie auth_type, allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter to index.php, a different vulnerability than CVE-2005-0992.  
Phase
Assigned (20071123)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
309687 29457 CVE-2007-6100 MISC:http://www.nth-dimension.org.uk/pub/NDSA20071119.txt.asc  View
309688 29457 CVE-2007-6100 CONFIRM:http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-8  View
309689 29457 CVE-2007-6100 SUSE:SUSE-SR:2008:006  View
309690 29457 CVE-2007-6100 URL:http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html  View
309691 29457 CVE-2007-6100 BID:26513  View
309692 29457 CVE-2007-6100 URL:http://www.securityfocus.com/bid/26513  View
309693 29457 CVE-2007-6100 VUPEN:ADV-2007-3943  View
309694 29457 CVE-2007-6100 URL:http://www.vupen.com/english/advisories/2007/3943  View
309695 29457 CVE-2007-6100 SECUNIA:27748  View
309696 29457 CVE-2007-6100 URL:http://secunia.com/advisories/27748  View
309697 29457 CVE-2007-6100 SECUNIA:29323  View
309698 29457 CVE-2007-6100 URL:http://secunia.com/advisories/29323  View
309699 29457 CVE-2007-6100 XF:phpmyadmin-loginpage-xss(38601)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52143 JVNDB-2007-000806 Feed2JS におけるクロスサイトスクリプティングの脆弱性 オープンソースのウェブアプリケーションである Feed2JS (Feed to JavaScript) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-6102 29457 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000806.html  View