Cross-Site Scripting Vulnerabilities in phpMyAdmin: CVE-2007-4306
Summary
DEBIAN-CVE-2007-4306: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.10.3 allow remote attackers to inject arbitrary web script or HTML via the (1) unlim_num_rows, (2) sql_query, or (3) pos parameter to (a) tbl_export.php... Affects phpmyadmin versions 4:5.0.4+dfsg2-2 – 4:5.2.2-really5.2.2+20250121+dfsg-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpMyAdmin is a widely-used open-source tool written in PHP, designed to handle the administration of MySQL databases through a web interface. It allows users to perform various database operations such as creating, modifying, and deleting databases, tables, and fields, as well as executing SQL queries. However, certain versions of phpMyAdmin are vulnerable to multiple cross-site scripting (XSS) attacks, which can compromise the security of web applications that rely on it.
Vulnerability Detail
The vulnerabilities identified in phpMyAdmin version 2.10.3 allow remote attackers to inject arbitrary web scripts or HTML through various parameters in specific PHP files. This includes parameters such as unlim_num_rows, sql_query, and pos in tbl_export.php, session_max_rows and pos in sql.php, username in server_privileges.php, and sql_query in main.php. The potential ramifications include unauthorized access to sensitive data, session hijacking, and the execution of malicious scripts in the context of the user's browser.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can implement input validation and sanitization on the affected parameters to mitigate the risk of XSS attacks. Additionally, restricting access to the phpMyAdmin interface to trusted IP addresses can help reduce exposure to potential attackers.
Conclusion
In summary, CVE-2007-4306 represents a significant security risk for users of phpMyAdmin version 2.10.3 due to multiple cross-site scripting vulnerabilities. It is crucial for users to update their installations to the latest patched version to safeguard against potential attacks. Implementing additional security measures and monitoring tools like Vulert can further enhance the security posture of your applications.
See every vulnerability recorded for phpmyadmin →
FAQ
CVE-2007-4306 is a designation for a specific vulnerability in phpMyAdmin that allows for cross-site scripting attacks.
If you are using phpMyAdmin version 2.10.3 or earlier, your installation is vulnerable. You can check your version by logging into phpMyAdmin and looking at the footer.
Exploitation of this vulnerability can lead to unauthorized access to user sessions, data theft, and the execution of malicious scripts.
Yes, you can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
References
Related vulnerabilities
Recent vulnerabilities recorded for phpmyadmin.
