Lucene search
FreeBSD753F8185-5BA9-42A4-BE02-3F55EE580093HistoryNov 29, 2010 - 12:00 a.m.
phpMyAdmin -- XSS attack in database search
2010-11-2900:00:00
vuxml.freebsd.org
15
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
72.8%
phpMyAdmin team reports:
It was possible to conduct a XSS attack using spoofed request on the
db search script.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | phpmyadmin | < 3.3.8.1 | UNKNOWN |
| FreeBSD | any | noarch | phpmyadmin211 | < 2.11.11.1 | UNKNOWN |
Related
fedora
fedora
[SECURITY] Fedora 14 Update: phpMyAdmin-3.3.8.1-1.fc14
2010-12-08 21:34:18
[SECURITY] Fedora 13 Update: phpMyAdmin-3.3.8.1-1.fc13
2010-12-08 21:36:02
openvas
openvas
Fedora Update for phpMyAdmin FEDORA-2010-18343
2010-12-23 00:00:00
FreeBSD Ports: phpMyAdmin
2011-01-24 00:00:00
phpMyAdmin Database Search Cross Site Scripting Vulnerability
2010-12-09 00:00:00
cve
cve
CVE-2010-4329
2010-12-02 16:22:00
debiancve
debiancve
CVE-2010-4329
2010-12-02 16:22:00
nessus
nessus
FreeBSD : phpMyAdmin -- XSS attack in database search (753f8185-5ba9-42a4-be02-3f55ee580093)
2010-11-30 00:00:00
Fedora 13 : phpMyAdmin-3.3.8.1-1.fc13 (2010-18371)
2010-12-09 00:00:00
Fedora 14 : phpMyAdmin-3.3.8.1-1.fc14 (2010-18343)
2010-12-09 00:00:00
ubuntucve
ubuntucve
CVE-2010-4329
2010-12-02 00:00:00
prion
prion
Cross site scripting
2010-12-02 16:22:00
phpmyadmin
phpmyadmin
XSS attack in database search.
2010-11-29 00:00:00
securityvulns
securityvulns
[ MDVSA-2010:244 ] phpmyadmin
2010-12-01 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2011-01-03 00:00:00
[SECURITY] [DSA 2139-1] New phpmyadmin packages fix several vulnerabilities
2011-01-03 00:00:00
seebug
seebug
phpMyAdmin数据库搜索跨站脚本执行漏洞
2010-12-09 00:00:00
osv
osv
phpmyadmin - several
2010-12-31 00:00:00
debian
debian
[SECURITY] [DSA 2139-1] New phpmyadmin packages fix several vulnerabilities
2010-12-31 15:57:29
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
72.8%
Related for 753F8185-5BA9-42A4-BE02-3F55EE580093