Vulnerability in Phpmyadmin
CVE-2007-0341
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.1 and earlier, when Microsoft Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a CSS style in the convcharset parameter to the top-level URI, a different vulnerability than CVE-2005-0992.
EPSS: 0.013 (67.5th percentile) — read the EPSS interpretation.
Affected products
- Phpmyadmin — versions 2.8.1
- N/a — versions n/a
References
- cve@mitre.org (Exploit, Patch, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)