Vulnerabilities > CVE-2007-2016 - Cross-Site Scripting vulnerability in PHPmyadmin 2.6.1

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

phpmyadmin

NVD

Published: 2007-04-12

Updated: 2018-10-16

Summary

Cross-site scripting (XSS) vulnerability in mysql/phpinfo.php in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the lang[] parameter.

Vulnerable Configurations

Part	Description	Count
Application	Phpmyadmin Phpmyadmin Phpmyadmin 2.6.1	1

References

http://osvdb.org/35049
http://securityreason.com/securityalert/2560
http://www.securityfocus.com/archive/1/465082/100/0/threaded