>> phpMyAdmin "REQUEST_URI" Variable Cross Site Scripting Vulnerability
Title : phpMyAdmin "REQUEST_URI" Variable Cross Site Scripting Vulnerability VUPEN ID : VUPEN/ADV-2007-3469 CVE ID : CVE-2007-5386
Rated as : Low Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2007-10-11
Technical Description
A vulnerability has been identified in phpMyAdmin, which could be exploited by attackers to execute arbitrary scripting code. This issue is caused by an input validation error in the "scripts/setup.php" script when processing the "REQUEST_URI" variable, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site.
