CVE-2007-5728: XSS
Published Oct 30, 2007
·Updated
Cross-site scripting (XSS) vulnerability in phpPgAdmin 3.5 to 4.1.1, and possibly 4.1.2, allows remote attackers to inject arbitrary web script or HTML via certain input available in PHPSELF in (1) redirect.php, possibly related to (2) login.php, different vectors than CVE-2007-2865.
Affected Software
4 affected components
phpPgAdmin phpPgAdmin=3.5
phpPgAdmin phpPgAdmin=3.5.2
phpPgAdmin phpPgAdmin=3.5.3
phpPgAdmin phpPgAdmin=4.1.1
Event History
Oct 30, 2007
CVE Published
09:46 PM
Oct 31, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-5728?
CVE-2007-5728 is classified as a medium severity vulnerability.
2
How do I fix CVE-2007-5728?
To fix CVE-2007-5728, upgrade to phpPgAdmin version 4.1.2 or later that addresses this vulnerability.
3
What software is affected by CVE-2007-5728?
CVE-2007-5728 affects phpPgAdmin versions 3.5 to 4.1.1, and possibly version 4.1.2.
4
What type of vulnerability is CVE-2007-5728?
CVE-2007-5728 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2007-5728 be exploited remotely?
Yes, CVE-2007-5728 can be exploited by remote attackers to inject arbitrary web scripts or HTML.