Debian/phpmyadmin: unknown

Cross-site scripting (XSS) vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that does not URL-encode requests, allows remote attackers to inject arbitrary web script

Action: Upgrade phpmyadmin to 4:2.11.1.2-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-5386#Debian:14/phpmyadmin
• https://security-tracker.debian.org/tracker/CVE-2007-5386

published 2007-10-12T10:17:00Z · modified 2026-10-21T17:47:49.660529577Z · JSON