Description

Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.1 and earlier, when Microsoft Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a CSS style in the convcharset parameter to the top-level URI, a different vulnerability than CVE-2005-0992.

Remediation

References

CVE-2007-0341

Related Vulnerabilities

Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51489)

Ruby Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2021-31799)

WordPress Plugin Bing Site Verification using Meta Tag Cross-Site Scripting (1.0)

PleskLin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-0132)

WordPress Plugin TheCartPress eCommerce Shopping Cart Multiple Vulnerabilities (1.3.9)

Severity

Medium

Classification

CVE-2007-0341

Tags

Missing Update Known Vulnerabilities