cbcvebase.
CVE-2007-6100
published 2007-11-23

CVE-2007-6100: Cross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin before 2.11.2.2, when logins are authenticated with the cookie…

PriorityP49low2.6CVSS 2.0
AVNACHAuNCNIPAN
EPSS
1.31%
67.5th percentile
Cross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin before 2.11.2.2, when logins are authenticated with the cookie auth_type, allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter to index.php, a different vulnerability than CVE-2005-0992.

Affected

87 ranges· showing 25
VendorProductVersion rangeFixed in
debianphpmyadmin< phpmyadmin 4:2.11.2.2-1 (bookworm)phpmyadmin 4:2.11.2.2-1 (bookworm)
phpmyadminphpmyadmin<= 2.11.2.1—
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——
phpmyadminphpmyadmin——

CVSS provenance

nvdv2.02.6LOWAV:N/AC:H/Au:N/C:N/I:P/A:N
osv4.3MEDIUM
vendor_debian4.3MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.