Skip to content
OpenAdvisories
Unscored DSA-1403-1 2 CVEs

phpmyadmin - cross-site scripting

Published Nov 8, 2007 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 3.1 phpmyadmin 4:2.6.2-3sarge6
Debian · 4.0 phpmyadmin 4:2.9.1.1-6

Vulnerabilities 2

  • Unscored —
    CVE-2007-5386 Public exploit

    Cross-site scripting (XSS) vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that doe…

  • Unscored —
    CVE-2007-5589 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbi…