4.3
CVE-2007-1395
- EPSS 0.89%
- Veröffentlicht 10.03.2007 22:19:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by injecting arbitrary JavaScript or HTML in a (1) db or (2) table parameter value followed by an uppercase </SCRIPT> end tag, which bypasses the protection against lowercase </script>.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpmyadmin ≫ Phpmyadmin Version2.8.0
Phpmyadmin ≫ Phpmyadmin Version2.8.0.1
Phpmyadmin ≫ Phpmyadmin Version2.8.0.2
Phpmyadmin ≫ Phpmyadmin Version2.8.0.3
Phpmyadmin ≫ Phpmyadmin Version2.8.1
Phpmyadmin ≫ Phpmyadmin Version2.8.1_dev
Phpmyadmin ≫ Phpmyadmin Version2.8.2
Phpmyadmin ≫ Phpmyadmin Version2.8.3
Phpmyadmin ≫ Phpmyadmin Version2.8.4
Phpmyadmin ≫ Phpmyadmin Version2.9
Phpmyadmin ≫ Phpmyadmin Version2.9.0
Phpmyadmin ≫ Phpmyadmin Version2.9.0.1
Phpmyadmin ≫ Phpmyadmin Version2.9.0.2
Phpmyadmin ≫ Phpmyadmin Version2.9.0.3
Phpmyadmin ≫ Phpmyadmin Version2.9.0_beta1
Phpmyadmin ≫ Phpmyadmin Version2.9.0_dev
Phpmyadmin ≫ Phpmyadmin Version2.9.0_rc1
Phpmyadmin ≫ Phpmyadmin Version2.9.1
Phpmyadmin ≫ Phpmyadmin Version2.9.1.1
Phpmyadmin ≫ Phpmyadmin Version2.9.1_rc1
Phpmyadmin ≫ Phpmyadmin Version2.9.1_rc2
Phpmyadmin ≫ Phpmyadmin Version2.9.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.89% | 0.746 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|