VDB
CVE-2007-5386
CVE-2007-5386
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Cross-site scripting (XSS) vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that does not URL-encode requests, allows remote attackers to inject arbitrary web script or HTML via the query string.
EPSS 3.33% · 88.5th percentile
Risk Scores
CVSS 2.0
4.300000190734863
EPSS Score
3.33%
88.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| phpmyadmin | phpmyadmin | 2.11.1 |
| n/a | n/a | n/a |
Timeline
- Oct 12, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Sep 11, 2023 EPSS Score
References
- http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/trunk/?view=log url
- 27173 third-party-advisory
- 27506 third-party-advisory
- phpmyadmin-setup-xss(37077) vdb
- 37678 vdb
- https://bugzilla.redhat.com/show_bug.cgi?id=333661 url
- http://www.digitrustgroup.com/advisories/TDG-advisory071009a url
- 26020 vdb
- ADV-2007-3469 vdb
- https://sourceforge.net/tracker/index.php?func=detail&aid=1810629&group_id=23067&atid=377408 url
- FEDORA-2007-2738 vendor-advisory
- DSA-1403 vendor-advisory
- 20071015 about phpMyAdmin setup.php XSS vulnerability mailing-list
- MDKSA-2007:199 vendor-advisory
- 27595 third-party-advisory
- http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_2_11_1/phpMyAdmin/ChangeLog?r1=10748&r2=10747&pathrev=10748 url
- http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-5 url
- https://nvd.nist.gov/vuln/detail/CVE-2007-5386 advisory