Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2010-4480HistoryDec 08, 2010 - 4:00 p.m.
CVE-2010-4480
2010-12-0816:00:00
Debian Security Bug Tracker
security-tracker.debian.org
11
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.016 Low
EPSS
Percentile
87.3%
error.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted BBcode tag containing “@” characters, as demonstrated using “[a@url@page]”.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | phpmyadmin | < 4:3.3.7-3 | phpmyadmin_4:3.3.7-3_all.deb |
| Debian | 11 | all | phpmyadmin | < 4:3.3.7-3 | phpmyadmin_4:3.3.7-3_all.deb |
| Debian | 999 | all | phpmyadmin | < 4:3.3.7-3 | phpmyadmin_4:3.3.7-3_all.deb |
| Debian | 13 | all | phpmyadmin | < 4:3.3.7-3 | phpmyadmin_4:3.3.7-3_all.deb |
Related
prion
prion
Cross site scripting
2010-12-08 16:00:00
nessus
nessus
phpMyAdmin error.php BBcode Tag XSS (PMASA-2010-9)
2011-01-06 00:00:00
Fedora 15 : phpMyAdmin-3.3.10-1.fc15 (2011-3761)
2011-03-27 00:00:00
Fedora 13 : phpMyAdmin-3.3.10-1.fc13 (2011-3733)
2011-03-30 00:00:00
openvas
openvas
phpMyAdmin 'error.php' Cross Site Scripting Vulnerability
2010-12-13 00:00:00
Mandriva Update for phpmyadmin MDVSA-2011:000 (phpmyadmin)
2011-01-11 00:00:00
Fedora Update for phpMyAdmin FEDORA-2011-3733
2011-04-01 00:00:00
phpmyadmin
phpmyadmin
Unvalidated input on error page.
2010-12-07 00:00:00
ubuntucve
ubuntucve
CVE-2010-4480
2010-12-08 00:00:00
cve
cve
CVE-2010-4480
2010-12-08 16:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: phpMyAdmin-3.3.10-1.fc15
2011-03-26 05:11:26
[SECURITY] Fedora 13 Update: phpMyAdmin-3.3.10-1.fc13
2011-03-29 19:53:51
[SECURITY] Fedora 14 Update: phpMyAdmin-3.3.10-1.fc14
2011-03-29 19:52:43
osv
osv
phpmyadmin - several
2010-12-31 00:00:00
debian
debian
[SECURITY] [DSA 2139-1] New phpmyadmin packages fix several vulnerabilities
2010-12-31 15:57:29
securityvulns
securityvulns
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.016 Low
EPSS
Percentile
87.3%
Related for DEBIANCVE:CVE-2010-4480