Launchpad.net

CVE 2007-2245

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.10.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the fieldkey parameter to browse_foreigners.php or (2) certain input to the PMA_sanitize function.

Related bugs and status

CVE-2007-2245 (Candidate) is related to these bugs:

Bug #162599: few serious security issues for phpMyAdmin

		In	Importance	Status
162599	few serious security issues for phpMyAdmin	phpmyadmin (Ubuntu)	Undecided	Fix Released
162599	few serious security issues for phpMyAdmin	phpmyadmin (Ubuntu Dapper)	Undecided	Won't Fix
162599	few serious security issues for phpMyAdmin	phpmyadmin (Ubuntu Edgy)	Undecided	Won't Fix
162599	few serious security issues for phpMyAdmin	phpmyadmin (Ubuntu Gutsy)	Undecided	Fix Released
162599	few serious security issues for phpMyAdmin	phpmyadmin (Ubuntu Hardy)	Undecided	Fix Released
162599	few serious security issues for phpMyAdmin	phpmyadmin (Ubuntu Feisty)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

References

CONFIRM: http://www.phpmyadmin....
CONFIRM: http://www.phpmyadmin....
SECUNIA: 24952
DEBIAN: DSA-1370
SECUNIA: 26733
MANDRIVA: MDKSA-2007:199
OSVDB: 35050
VUPEN: ADV-2007-1508
XF: phpmyadmin-fieldkey-xs...