PT-2007-6713 · Php · Phppgadmin

Publicado 2007-10-30 · Atualizado 2017-07-29 · CVE-2007-5728

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions phpPgAdmin versions 3.5 through 4.1.1 phpPgAdmin version 4.1.2

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via certain input available in PHP SELF in (1) "redirect.php", possibly related to (2) "login.php".

Recommendations For phpPgAdmin versions 3.5 through 4.1.1, update to a version that contains a fix for this issue. For phpPgAdmin version 4.1.2, if affected, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the "redirect.php" and "login.php" files until a patch is available.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2007-5728

DSA-1693-1

Produtos afetados

Phppgadmin

Referências · 15

• 🔥 http://securityfocus.com/bid/24182 · Exploit
• 🔥 https://exploit-db.com/exploits/30090 · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063617.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-5728 · Nota de Segurança
• http://novell.com/linux/security/advisories/2007_24_sr.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5728 · Nota
• http://secunia.com/advisories/25446 · Aviso do Fabricante
• http://secunia.com/advisories/27756 · Nota
• http://debian.org/security/2008/dsa-1693 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-5728 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34550 · Nota
• http://osvdb.org/36699 · Nota
• http://secunia.com/advisories/33263 · Nota
• https://security-tracker.debian.org/tracker/CVE-2007-5728 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2007-5728 · Aviso do Fabricante