CVE-2007-5976 in phpMyAdmin

Summary

SQL injection vulnerability in db_create.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to execute arbitrary SQL commands via the db parameter.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 11/14/2007
• Disclosure: 11/14/2007
• Moderation: VulDB entry created
• Entries: 2: VDB-3452
• CPE: ready
• CWE: CWE-89 (Confirmed)
• CVSS: 5.5
• EPSS: 0.01336
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-5976
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-5976
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-5976/