Lucene search
K

5 matches found

Tenable Nessus
Tenable Nessus
added 2007/11/12 12:0 a.m.27 views

FreeBSD : phpmyadmin -- XSS vulnerability (2d2dcbb4-906c-11dc-a951-0016179b2dd5)

The DigiTrust Group reports : When creating a new database, a malicious user can use a client-side Web proxy to place malicious code in the db parameter of the POST request. Since dbcreate.php does not properly sanitize user-supplied input, an administrator could face a persistent XSS attack when...

6.5CVSS5.3AI score0.01336EPSS
Exploits1References5
FreeBSD
FreeBSD
added 2007/11/11 12:0 a.m.42 views

phpmyadmin -- cross-site scripting vulnerability

The DigiTrust Group reports: When creating a new database, a malicious user can use a client-side Web proxy to place malicious code in the db parameter of the POST request. Since dbcreate.php does not properly sanitize user-supplied input, an administrator could face a persistent XSS attack when...

6.4AI score
Exploits0References2
OSV
OSV
added 2007/11/08 12:0 a.m.23 views

DSA-1403-1 phpmyadmin - cross-site scripting

Bulletin has no description...

4.3CVSS6AI score0.11824EPSS
Exploits0
phpMyAdmin
phpMyAdmin
added 2007/10/17 12:0 a.m.38 views

XSS vulnerabilities

PMASA-2007-6 Announcement-ID: PMASA-2007-6 Date: 2007-10-17 Updated: 2007-10-24 Summary XSS vulnerabilities Description We received an advisory from Omer Singer, The DigiTrust Group, and we wish to thank him for his work. It was possible to trigger this attack on serverstatus.php. Our team fixed...

4.3CVSS5.6AI score0.11421EPSS
Exploits0Affected Software1
FreeBSD
FreeBSD
added 2007/10/17 12:0 a.m.41 views

phpmyadmin -- cross-site scripting vulnerability

The DigiTrust Group discovered serious XSS vulnerability in the phpMyAdmin serverstatus.php script. According to their report vulnerability can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site...

4.3CVSS6.4AI score0.11421EPSS
Exploits0References2
Rows per page
Query Builder