CVE-2007-1395

Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by…

published March 10, 2007

CVSS
—
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by injecting arbitrary JavaScript or HTML in a (1) db or (2) table parameter value followed by an uppercase </SCRIPT> end tag, which bypasses the protection against lowercase </script>.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01465 · 73.3th percentile
Published
2007-03-10T22:00Z
EPSS history
Timeline
  • 10 MAR 22:00Z
    Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by…
    cvelistv5