Lucene search

K
freebsdFreeBSDED536336-1C57-11E1-86F4-E0CB4E266481
HistoryNov 24, 2011 - 12:00 a.m.

phpMyAdmin -- Multiple XSS

2011-11-2400:00:00
vuxml.freebsd.org
18

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

68.2%

The phpMyAdmin development team reports:

Using crafted database names, it was possible to produce XSS
in the Database Synchronize and Database rename panels. Using
an invalid and crafted SQL query, it was possible to produce
XSS when editing a query on a table overview panel or when
using the view creation dialog. Using a crafted column type,
it was possible to produce XSS in the table search and create
index dialogs.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchphpmyadmin<Β 3.4.8.r1UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

68.2%