Lucene search
FreeBSD4769914E-B844-11DE-B159-0030843D3802HistoryOct 13, 2009 - 12:00 a.m.
phpmyadmin -- XSS and SQL injection vulnerabilities
2009-10-1300:00:00
vuxml.freebsd.org
11
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
76.9%
phpMyAdmin Team reports:
Cross-site scripting (XSS) vulnerability allows remote attackers to
inject arbitrary web script or HTML via a crafted MySQL table name.
SQL injection vulnerability allows remote attackers to inject SQL via
various interface parameters of the PDF schema generator feature.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | phpmyadmin | < 3.2.2.1 | UNKNOWN |
| FreeBSD | any | noarch | phpmyadmin211 | < 2.11.9.6 | UNKNOWN |
Related
osv
osv
phpmyadmin - several vulnerabilities
2009-10-25 00:00:00
phpMyAdmin Cross-site Scripting In MySQL Table Name
2022-05-02 03:47:43
openvas
openvas
Mandrake Security Advisory MDVSA-2009:274 (phpmyadmin)
2009-10-19 00:00:00
FreeBSD Ports: phpMyAdmin
2009-10-19 00:00:00
nessus
nessus
Fedora 11 : phpMyAdmin-3.2.2.1-1.fc11 (2009-10530)
2009-10-16 00:00:00
phpMyAdmin < 2.11.9.6 / 3.x < 3.2.2.1 Multiple Vulnerabilities
2009-10-15 00:00:00
openSUSE Security Update : phpMyAdmin (phpMyAdmin-1416)
2009-10-23 00:00:00
debian
debian
[SECURITY] [DSA 1918-1] New phpmyadmin packages fix several vulnerabilities
2009-10-25 12:00:02
phpmyadmin
phpmyadmin
XSS and SQL injection vulnerabilities
2009-10-13 00:00:00
seebug
seebug
phpMyAdmin SQL注入和跨站脚本漏洞
2009-10-22 00:00:00
prion
prion
Sql injection
2009-10-16 16:30:00
Cross site scripting
2009-10-16 16:30:00
redhatcve
redhatcve
CVE-2009-3697
2019-10-04 22:18:57
CVE-2009-3696
2019-10-04 22:18:58
debiancve
debiancve
CVE-2009-3697
2009-10-16 16:30:00
CVE-2009-3696
2009-10-16 16:30:00
ubuntucve
ubuntucve
CVE-2009-3696
2009-10-16 00:00:00
CVE-2009-3697
2009-10-16 00:00:00
cve
cve
CVE-2009-3697
2009-10-16 16:30:00
CVE-2009-3696
2009-10-16 16:30:00
github
github
phpMyAdmin Cross-site Scripting In MySQL Table Name
2022-05-02 03:47:43
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
76.9%
Related for 4769914E-B844-11DE-B159-0030843D3802