CVE-2007-0204

Executive Summary

Informations
Name	CVE-2007-0204	First vendor Publication	2007-01-11
Vendor	Cve	Last vendor Modification	2011-03-07

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score	6.8	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Security Protection

Impacts

Provides unauthorized access : Allows partial confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service.

Detail

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.9.2-rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0204

CPE : Common Platform Enumeration

Type	Description	Count
Application	Phpmyadmin Phpmyadmin cpe:/a:phpmyadmin:phpmyadmin:2.9.1.1	1

Open Source Vulnerability Database (OSVDB)

id	Description
32667	phpMyAdmin Multiple Unspecified XSS

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/21987
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDKSA-2007:199
MISC	http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0
OSVDB	http://osvdb.org/32667
SECUNIA	http://secunia.com/advisories/23702
VUPEN	http://www.vupen.com/english/advisories/2007/0125
XF	http://xforce.iss.net/xforce/xfdb/31387