CVE-2007-5386

no score yetEPSS 3.3%

phpmyadmin phpmyadmin: no CVSS score yet. EPSS 3.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that does not URL-encode requests, allows remote attackers to inject arbitrary web script or HTML via the query string.

EPSS: 3.3% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-11-01)
CWE: CWE-79
Published: 2007-10-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

phpmyadmin:phpmyadmin

References

http://osvdb.org/37678
http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_2_11_1/phpMyAdmin/ChangeLog?r1=10748&r2=10747&pathrev=10748
http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/trunk/?view=log
http://secunia.com/advisories/27173
http://secunia.com/advisories/27506

Check your stack JSON