Lucene search
Tenable5209.PRMHistoryOct 15, 2009 - 12:00 a.m.
phpMyAdmin < 2.11.9.6 / 3.x < 3.2.2.1 Multiple Vulnerabilities
2009-10-1500:00:00
Tenable
www.tenable.com
10
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.005
Percentile
77.1%
The remote web server is running a version of phpMyAdmin prior to 2.11.9.6, or 3.x prior to 3.2.2.1. Such versions are potentially affected by multiple issues :
- A cross-site scripting (XSS) flaw exists which allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table. (CVE-2009-3696)
- A SQL injection flaw affects the PDF schema generator functionality. Specifically, this flaw allows remote attackers to execute arbitrary SQL commands via unspecified interface parameters. (CVE-2009-3697)
Binary data 5209.prm| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpmyadmin | phpmyadmin | cpe:/a:phpmyadmin:phpmyadmin |
Related
phpmyadmin
phpmyadmin
XSS and SQL injection vulnerabilities
2009-10-13 00:00:00
openvas
openvas
Mandrake Security Advisory MDVSA-2009:274 (phpmyadmin)
2009-10-19 00:00:00
FreeBSD Ports: phpMyAdmin
2009-10-19 00:00:00
debian
debian
[SECURITY] [DSA 1918-1] New phpmyadmin packages fix several vulnerabilities
2009-10-25 12:00:02
nessus
nessus
Fedora 11 : phpMyAdmin-3.2.2.1-1.fc11 (2009-10530)
2009-10-16 00:00:00
Debian DSA-1918-1 : phpmyadmin - several vulnerabilities
2010-02-24 00:00:00
openSUSE Security Update : phpMyAdmin (phpMyAdmin-1416)
2009-10-23 00:00:00
osv
osv
phpmyadmin - several vulnerabilities
2009-10-25 00:00:00
phpMyAdmin Cross-site Scripting In MySQL Table Name
2022-05-02 03:47:43
seebug
seebug
phpMyAdmin SQL注入和跨站脚本漏洞
2009-10-22 00:00:00
freebsd
freebsd
phpmyadmin -- XSS and SQL injection vulnerabilities
2009-10-13 00:00:00
cvelist
cvelist
CVE-2009-3697
2009-10-16 16:00:00
CVE-2009-3696
2009-10-16 16:00:00
debiancve
debiancve
CVE-2009-3697
2009-10-16 16:30:00
CVE-2009-3696
2009-10-16 16:30:00
ubuntucve
ubuntucve
CVE-2009-3696
2009-10-16 00:00:00
CVE-2009-3697
2009-10-16 00:00:00
prion
prion
Cross site scripting
2009-10-16 16:30:00
Sql injection
2009-10-16 16:30:00
nvd
nvd
CVE-2009-3696
2009-10-16 16:30:00
CVE-2009-3697
2009-10-16 16:30:00
redhatcve
redhatcve
CVE-2009-3697
2019-10-04 22:18:57
CVE-2009-3696
2019-10-04 22:18:58
cve
cve
CVE-2009-3696
2009-10-16 16:30:00
CVE-2009-3697
2009-10-16 16:30:00
github
github
phpMyAdmin Cross-site Scripting In MySQL Table Name
2022-05-02 03:47:43
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.005
Percentile
77.1%
Related for 5209.PRM