NetSight
IP …
low2.6

CVE-2007-6100

Cross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin before 2.11.2.2, when logins are authenticated with the cookie aut…

Impact

Cross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin before 2.11.2.2, when logins are authenticated with the cookie auth_type, allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter to index.php, a different vulnerability than CVE-2005-0992.

Affected products

VendorProductAffected versions
PhpmyadminPhpmyadmin
through 2.11.2.1
Versions 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4

Weakness classification

CWE-79

References