First published: Wed Apr 25 2007(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.10.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the fieldkey parameter to browse_foreigners.php or (2) certain input to the PMA_sanitize function.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
phpMyAdmin phpMyAdmin | =2.10.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-2245 is classified as a high severity vulnerability due to its potential for remote exploitation through cross-site scripting.
To fix CVE-2007-2245, upgrade phpMyAdmin to version 2.10.1.0 or later, which addresses the identified vulnerabilities.
CVE-2007-2245 can facilitate cross-site scripting (XSS) attacks that allow attackers to inject and execute arbitrary web scripts or HTML.
CVE-2007-2245 is present in versions of phpMyAdmin prior to 2.10.1.0.
Any user of phpMyAdmin versions before 2.10.1.0 is potentially affected by CVE-2007-2245.