CVE-2007-2245
Priority
Untriaged
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before
2.10.1.0 allow remote attackers to inject arbitrary web script or HTML via
(1) the fieldkey parameter to browse_foreigners.php or (2) certain input to
the PMA_sanitize function.
2.10.1.0 allow remote attackers to inject arbitrary web script or HTML via
(1) the fieldkey parameter to browse_foreigners.php or (2) certain input to
the PMA_sanitize function.
Notes
PMASA-2007-4
Assigned-to
fujitsu
Package
| Upstream: | released (2.10.1) |
| Ubuntu 8.04 LTS (Hardy Heron): | not-affected |
| Ubuntu 10.04 LTS (Lucid Lynx): | not-affected |