CVE-2007-6100

Publication date 23 November 2007

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Description

Cross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin before 2.11.2.2, when logins are authenticated with the cookie auth_type, allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter to index.php, a different vulnerability than CVE-2005-0992.

Status

Package Ubuntu Release Status
phpmyadmin 9.10 karmic
Not affected
9.04 jaunty
Not affected
8.10 intrepid
Not affected
8.04 LTS hardy
Not affected
7.10 gutsy
Fixed 4:2.10.3-1ubuntu0.1
7.04 feisty
Fixed 4:2.9.1.1-2ubuntu1.1
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life

References

Other references