Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2007-5977

EPSS 0.69% · P72
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2007-5977

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cross-site scripting (XSS) vulnerability in db_create.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to inject arbitrary web script or HTML via a hex-encoded IMG element in the db parameter in a POST request, a different vulnerability than CVE-2006-6942.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
phpMyAdmin DB_Create.PHP 跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
phpMyAdmin 2.11.2.1之前的版本中的db_create.php存在跨站脚本攻击漏洞，y允许具有创建数据库(CREATE DATABASE)权限的远程验证用户可以借助一个POST请求中的db参数的一个hex-encoded IMG元件注入任意web脚本或HTML。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2007-5977

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2007-5977

请登录查看更多情报信息。

Same Patch Batch · n/a · 2007-11-15 · 75 CVEs total

CVE-2007-4688Apple Mac OS X 网络组件访问控制漏洞
CVE-2007-5982X7 Chat 多个跨站脚本攻击漏洞
CVE-2007-4697Apple Mac OS X内存破坏漏洞
CVE-2007-4696Apple Mac OS X WebCore竞争条件漏洞
CVE-2007-4695Apple Mac OS X WebCore未明输入验证漏洞
CVE-2007-4694Apple Mac OS X Safari远程访问控制漏洞
CVE-2007-4693Apple Mac OS X SecurityAgent身份验证绕过漏洞
CVE-2007-4691Apple Mac OS X NSURL访问控制绕过漏洞
CVE-2007-4690Apple Mac OS X NFS组件双重释放漏洞
CVE-2007-4689Apple Mac OS X 网络组件双重释放漏洞
CVE-2006-7229skge Driver Spin_Unlock spin_lock/spin_unlock函数远程拒绝服务漏洞
CVE-2007-4687Apple Mac OS X remote_cmds组件目录遍历漏洞
CVE-2007-4686Apple Mac OS X ttioctl整数溢出漏洞
CVE-2007-4685Apple Mac OS X kernel 本地用户权限提升漏洞
CVE-2007-4684Apple Mac OS X kernel整数溢出多个安全漏洞
CVE-2007-4683Apple Mac OS X kernel目录遍历漏洞
CVE-2007-4682Apple Mac OS X CoreText拒绝服务攻击漏洞
CVE-2007-4681Apple Mac OS X CoreFoundation缓冲区溢出漏洞
CVE-2007-4680Apple Mac OS X 敏感信息泄露漏洞
CVE-2007-4679Apple Mac OS CFNetwork XCFFTP输入验证漏洞

Showing top 20 of 75 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2007-5977

No comments yet

Leave a comment