Vulnerability Details CVE-2007-5976
SQL injection vulnerability in db_create.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to execute arbitrary SQL commands via the db parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.5%
CVSS Severity
CVSS v2 Score 6.5
References
- http://secunia.com/advisories/27630
- http://secunia.com/advisories/27753
- http://sourceforge.net/project/shownotes.php?release_id=553333
- http://www.digitrustgroup.com/advisories/tdg-advisory071108a.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:229
- http://www.securityfocus.com/bid/26512
- http://www.vupen.com/english/advisories/2007/3824
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38403
- https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00777.html
- http://secunia.com/advisories/27630
- http://secunia.com/advisories/27753
- http://sourceforge.net/project/shownotes.php?release_id=553333
- http://www.digitrustgroup.com/advisories/tdg-advisory071108a.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:229
- http://www.securityfocus.com/bid/26512
- http://www.vupen.com/english/advisories/2007/3824
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38403
- https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00777.html
Products affected by CVE-2007-5976
-
cpe:2.3:a:phpmyadmin:phpmyadmin:0.9.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.1
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.2
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.3
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.4
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.5
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.6
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.7
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.8
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.1
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.1.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.2
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.2.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.2.1
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.2.2
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.2.3
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.2.4
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.2.5
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.2.6
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.2.7
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.2.8
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.2.9
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.2.9.1
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.2.9.2
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.2.9.3
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.2.9.4
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.2.9.5
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.3
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.3.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:1.3.1
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.4.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.1
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.2
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.3
-
cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1