CVE-2007-2865 Cross-site scripting (XSS) vulnerability in sqledit.php in phpPgAdmin 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the server parameter.
HighCVSS 9.3
EPSS 6.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in sqledit.php in phpPgAdmin 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the server parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phppgadmin/phppgadmin | = 4.1.1 | No fix listed |
| debian/phppgadmin(Debian:13) | < 4.1.2-1 | 4.1.2-1 |
| debian/phppgadmin(Debian:14) | < 4.1.2-1 | 4.1.2-1 |
References
- Debian Security Tracker CVE-2007-2865 vendor-advisory
- bugs.debian.org issue-tracking
- 20070522 phpPgAdmin XSS Vulnerability mailing-list
- 38138 vdb-entry
- 27756 third-party-advisory
- 33263 third-party-advisory
- DSA-1693 vendor-advisory
- SUSE-SR:2007:024 vendor-advisory
- 24115 vdb-entry
- phppgadmin-sqledit-xss(34456) vdb-entry