CVE-2007-2245: XSS

Published Apr 25, 2007

Updated

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.10.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the fieldkey parameter to browseforeigners.php or (2) certain input to the PMAsanitize function.

Affected Software

1 affected component

phpMyAdmin phpMyAdmin=2.10.1.0

Event History

Apr 25, 2007

CVE Published

04:19 PM

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-2245?

CVE-2007-2245 is classified as a high severity vulnerability due to its potential for remote exploitation through cross-site scripting.

How do I fix CVE-2007-2245?

To fix CVE-2007-2245, upgrade phpMyAdmin to version 2.10.1.0 or later, which addresses the identified vulnerabilities.

What types of attacks can CVE-2007-2245 facilitate?

CVE-2007-2245 can facilitate cross-site scripting (XSS) attacks that allow attackers to inject and execute arbitrary web scripts or HTML.

In which software versions is CVE-2007-2245 present?

CVE-2007-2245 is present in versions of phpMyAdmin prior to 2.10.1.0.

Who is affected by CVE-2007-2245?

Any user of phpMyAdmin versions before 2.10.1.0 is potentially affected by CVE-2007-2245.