CVE-2007-1395: XSS
Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by injecting arbitrary JavaScript or HTML in a (1) db or (2) table parameter value followed by an uppercase </SCRIPT> end tag, which bypasses the protection against lowercase </script>.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1395?
CVE-2007-1395 has a medium severity rating as it allows for cross-site scripting (XSS) attacks that can compromise user data.
How do I fix CVE-2007-1395?
To fix CVE-2007-1395, upgrade to phpMyAdmin versions later than 2.9.2 that address this XSS vulnerability.
What versions of phpMyAdmin are affected by CVE-2007-1395?
CVE-2007-1395 affects phpMyAdmin versions from 2.8.0 through 2.9.2.
What types of attacks can be executed through CVE-2007-1395?
CVE-2007-1395 allows attackers to inject arbitrary JavaScript or HTML, leading to potential data theft or session hijacking.
Is user data at risk with CVE-2007-1395?
Yes, user data can be at risk as CVE-2007-1395 enables attackers to execute malicious scripts in the context of the user’s browser.