Debian Security Bug TrackerDEBIANCVE:CVE-2007-4306CVE-2007-4306
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
59.9%
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.10.3 allow remote attackers to inject arbitrary web script or HTML via the (1) unlim_num_rows, (2) sql_query, or (3) pos parameter to (a) tbl_export.php; the (4) session_max_rows or (5) pos parameter to (b) sql.php; the (6) username parameter to © server_privileges.php; or the (7) sql_query parameter to (d) main.php. NOTE: vector 5 might be a regression or incomplete fix for CVE-2006-6942.7.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | phpmyadmin | <= 4:5.2.1+dfsg-1 | phpmyadmin_4:5.2.1+dfsg-1_all.deb |
| Debian | 11 | all | phpmyadmin | <= 4:5.0.4+dfsg2-2+deb11u1 | phpmyadmin_4:5.0.4+dfsg2-2+deb11u1_all.deb |
| Debian | 999 | all | phpmyadmin | <= 4:5.2.1+dfsg-3 | phpmyadmin_4:5.2.1+dfsg-3_all.deb |
| Debian | 13 | all | phpmyadmin | <= 4:5.2.1+dfsg-3 | phpmyadmin_4:5.2.1+dfsg-3_all.deb |
Related
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
59.9%