CVE-2007-2865: XSS

Published May 25, 2007

Updated

Cross-site scripting (XSS) vulnerability in sqledit.php in phpPgAdmin 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the server parameter.

Affected Software

1 affected component

phpPgAdmin phpPgAdmin=4.1.1

Event History

May 25, 2007

CVE Published

06:30 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-2865?

CVE-2007-2865 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2007-2865?

To fix CVE-2007-2865, upgrade phpPgAdmin to version 4.1.2 or newer, which addresses the vulnerability.

What is the impact of CVE-2007-2865 on phpPgAdmin users?

The impact of CVE-2007-2865 allows attackers to execute arbitrary scripts in the context of a user's browser session, potentially compromising user data.

Who is affected by CVE-2007-2865?

CVE-2007-2865 affects users of phpPgAdmin version 4.1.1 who have not applied the necessary security updates.

What type of vulnerability is CVE-2007-2865?

CVE-2007-2865 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject malicious scripts.