CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-1395

Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by injecting arbitrary JavaScript or HTML in a (1) db or (2) table parameter value followed by an uppercase </SCRIPT> end tag, which bypasses the protection against lowercase </script>.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 68.7%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2007-1395

Phpmyadmin » Phpmyadmin » Version: 2.8.0

cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0
Phpmyadmin » Phpmyadmin » Version: 2.8.0.1

cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.1
Phpmyadmin » Phpmyadmin » Version: 2.8.0.2

cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.2
Phpmyadmin » Phpmyadmin » Version: 2.8.0.3

cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.3
Phpmyadmin » Phpmyadmin » Version: 2.8.1

cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1
Phpmyadmin » Phpmyadmin » Version: 2.8.1_dev

cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1_dev
Phpmyadmin » Phpmyadmin » Version: 2.8.2

cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.2
Phpmyadmin » Phpmyadmin » Version: 2.8.3

cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.3
Phpmyadmin » Phpmyadmin » Version: 2.8.4

cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.4
Phpmyadmin » Phpmyadmin » Version: 2.9

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9
Phpmyadmin » Phpmyadmin » Version: 2.9.0

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0
Phpmyadmin » Phpmyadmin » Version: 2.9.0.1

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.1
Phpmyadmin » Phpmyadmin » Version: 2.9.0.2

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.2
Phpmyadmin » Phpmyadmin » Version: 2.9.0.3

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.3
Phpmyadmin » Phpmyadmin » Version: 2.9.0_beta1

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_beta1
Phpmyadmin » Phpmyadmin » Version: 2.9.0_dev

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_dev
Phpmyadmin » Phpmyadmin » Version: 2.9.0_rc1

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_rc1
Phpmyadmin » Phpmyadmin » Version: 2.9.1

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1
Phpmyadmin » Phpmyadmin » Version: 2.9.1.1

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1.1
Phpmyadmin » Phpmyadmin » Version: 2.9.1_rc1

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc1
Phpmyadmin » Phpmyadmin » Version: 2.9.1_rc2

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc2
Phpmyadmin » Phpmyadmin » Version: 2.9.2

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-1395

Products

Pricing

Contact Us