Vulnerability Database

296,746

Total vulnerabilities in the database

CVE-2007-5386

Cross-site scripting (XSS) vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that does not URL-encode requests, allows remote attackers to inject arbitrary web script or HTML via the query string.

  • Published: Oct 12, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2007-5386
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
phpmyadmin / phpmyadmin 2.11.1 2.11.1.x