Description

Cross-site scripting (XSS) vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that does not URL-encode requests, allows remote attackers to inject arbitrary web script or HTML via the query string.

Remediation

References

CVE-2007-5386

Related Vulnerabilities

WordPress Plugin oQey Gallery 'tbpv_domain' Parameter Cross-Site Scripting (0.2)

ownCloud Resource Management Errors Vulnerability (CVE-2015-6500)

WordPress Plugin WP Table Builder-WordPress Table Security Bypass (1.3.15)

Apache Tomcat CVE-2019-2684 Vulnerability (CVE-2019-2684)

WordPress Plugin BuddyPress Multiple Vulnerabilities (9.0.0)

Severity

Medium

Classification

CVE-2007-5386 CWE-707

Tags

Missing Update Known Vulnerabilities