Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2007-5977

Published: 15 November 2007

Cross-site scripting (XSS) vulnerability in db_create.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to inject arbitrary web script or HTML via a hex-encoded IMG element in the db parameter in a POST request, a different vulnerability than CVE-2006-6942.

Notes

AuthorNote
fujitsu
PMASA-2007-7
Dapper/Edgy/Feisty have a non-vulnerable version of the code.

Priority

Unknown

Status

Package Release Status
phpmyadmin
Launchpad, Ubuntu, Debian
upstream
Released
dapper Not vulnerable

edgy Not vulnerable

feisty Not vulnerable

gutsy
Released (4:2.10.3-1ubuntu0.1)
hardy Not vulnerable