CVE-2007-4306

2007-08-1300:00:00

ubuntu.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

59.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.10.3
allow remote attackers to inject arbitrary web script or HTML via the (1)
unlim_num_rows, (2) sql_query, or (3) pos parameter to (a) tbl_export.php;
the (4) session_max_rows or (5) pos parameter to (b) sql.php; the (6)
username parameter to © server_privileges.php; or the (7) sql_query
parameter to (d) main.php. NOTE: vector 5 might be a regression or
incomplete fix for CVE-2006-6942.7.