Published: 30/10/2007 Updated: 29/07/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in phpPgAdmin 3.5 to 4.1.1, and possibly 4.1.2, allows remote malicious users to inject arbitrary web script or HTML via certain input available in PHP_SELF in (1) redirect.php, possibly related to (2) login.php, different vectors than CVE-2007-2865.

Vulnerable Product	Search on Vulmon	Subscribe to Product
phppgadmin phppgadmin 3.5
phppgadmin phppgadmin 3.5.2
phppgadmin phppgadmin 3.5.3
phppgadmin phppgadmin 4.1.1

Debian Bug report logs - #449103 CVE-2007-5728: Cross-site scripting (XSS) vulnerability Package: phppgadmin; Maintainer for phppgadmin is Debian PostgreSQL Maintainers <team+postgresql@trackerdebianorg>; Source for phppgadmin is src:phppgadmin (PTS, buildd, popcon) Reported by: Steffen Joeris <steffenjoeris@skolelinux ...

Debian Bug report logs - #508026 register_globals on is not supported Package: phppgadmin; Maintainer for phppgadmin is Debian PostgreSQL Maintainers <team+postgresql@trackerdebianorg>; Source for phppgadmin is src:phppgadmin (PTS, buildd, popcon) Reported by: Raphael Geissert <atomo64@gmailcom> Date: Sun, 7 Dec ...

Several remote vulnerabilities have been discovered in phpPgAdmin, a tool to administrate PostgreSQL database over the web The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-2865 Cross-site scripting vulnerability allows remote attackers to inject arbitrary web script or HTML via the server ...

source: wwwsecurityfocuscom/bid/24182/info phpPgAdmin is prone to a cross-site scripting vulnerability Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website As a result, the attacker may be able to steal cookie-based authentication creden ...

CWE-79 http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063617.html http://www.securityfocus.com/bid/24182 http://secunia.com/advisories/25446 http://www.novell.com/linux/security/advisories/2007_24_sr.html http://secunia.com/advisories/27756 http://www.debian.org/security/2008/dsa-1693 http://secunia.com/advisories/33263 http://osvdb.org/36699 https://exchange.xforce.ibmcloud.com/vulnerabilities/34550 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449103 https://www.exploit-db.com/exploits/30090/https://www.debian.org/security/./dsa-1693

CVE-2007-5728

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect