Lucene search

[email protected]NVD:CVE-2010-3056

HistoryAug 24, 2010 - 8:00 p.m.

CVE-2010-3056

2010-08-2420:00:02

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.5

Confidence

High

EPSS

0.005

Percentile

76.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.11.x before 2.11.10.1 and 3.x before 3.3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) db_search.php, (2) db_sql.php, (3) db_structure.php, (4) js/messages.php, (5) libraries/common.lib.php, (6) libraries/database_interface.lib.php, (7) libraries/dbi/mysql.dbi.lib.php, (8) libraries/dbi/mysqli.dbi.lib.php, (9) libraries/db_info.inc.php, (10) libraries/sanitizing.lib.php, (11) libraries/sqlparser.lib.php, (12) server_databases.php, (13) server_privileges.php, (14) setup/config.php, (15) sql.php, (16) tbl_replace.php, and (17) tbl_sql.php.

Affected configurations

Nvd

Node

phpmyadminphpmyadminMatch2.11.0

phpmyadminphpmyadminMatch2.11.1.0

phpmyadminphpmyadminMatch2.11.1.1

phpmyadminphpmyadminMatch2.11.1.2

phpmyadminphpmyadminMatch2.11.2.0

phpmyadminphpmyadminMatch2.11.2.1

phpmyadminphpmyadminMatch2.11.2.2

phpmyadminphpmyadminMatch2.11.3.0

phpmyadminphpmyadminMatch2.11.4.0

phpmyadminphpmyadminMatch2.11.5.0

phpmyadminphpmyadminMatch2.11.5.1

phpmyadminphpmyadminMatch2.11.5.2

phpmyadminphpmyadminMatch2.11.6.0

phpmyadminphpmyadminMatch2.11.7.0

phpmyadminphpmyadminMatch2.11.7.1

phpmyadminphpmyadminMatch2.11.8.0

phpmyadminphpmyadminMatch2.11.9.0

phpmyadminphpmyadminMatch2.11.9.1

phpmyadminphpmyadminMatch2.11.9.2

phpmyadminphpmyadminMatch2.11.9.3

phpmyadminphpmyadminMatch2.11.9.4

phpmyadminphpmyadminMatch2.11.9.5

phpmyadminphpmyadminMatch2.11.9.6

phpmyadminphpmyadminMatch2.11.10.0

Node

phpmyadminphpmyadminMatch3.0.0

phpmyadminphpmyadminMatch3.0.0alpha

phpmyadminphpmyadminMatch3.0.0beta

phpmyadminphpmyadminMatch3.0.0rc1

phpmyadminphpmyadminMatch3.0.1

phpmyadminphpmyadminMatch3.0.1rc1

phpmyadminphpmyadminMatch3.0.1.1

phpmyadminphpmyadminMatch3.1.0

phpmyadminphpmyadminMatch3.1.0beta1

phpmyadminphpmyadminMatch3.1.1

phpmyadminphpmyadminMatch3.1.1rc1

phpmyadminphpmyadminMatch3.1.2

phpmyadminphpmyadminMatch3.1.2rc1

phpmyadminphpmyadminMatch3.1.3

phpmyadminphpmyadminMatch3.1.3rc1

phpmyadminphpmyadminMatch3.1.3.1

phpmyadminphpmyadminMatch3.1.3.2

phpmyadminphpmyadminMatch3.1.4

phpmyadminphpmyadminMatch3.1.4rc2

phpmyadminphpmyadminMatch3.1.5

phpmyadminphpmyadminMatch3.1.5rc1

phpmyadminphpmyadminMatch3.2.0

phpmyadminphpmyadminMatch3.2.0beta1

phpmyadminphpmyadminMatch3.2.0rc1

phpmyadminphpmyadminMatch3.2.1

phpmyadminphpmyadminMatch3.2.1rc1

phpmyadminphpmyadminMatch3.2.2

phpmyadminphpmyadminMatch3.2.2rc1

phpmyadminphpmyadminMatch3.3.0.0

phpmyadminphpmyadminMatch3.3.1.0

phpmyadminphpmyadminMatch3.3.2.0

phpmyadminphpmyadminMatch3.3.3.0

phpmyadminphpmyadminMatch3.3.4.0

phpmyadminphpmyadminMatch3.3.5.0

VendorProductVersionCPE
phpmyadminphpmyadmin2.11.0cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.1.0cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.1.1cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.1.2cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.2.0cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.2.1cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.2.2cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.3.0cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.4.0cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.5.0cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpmyadmin	phpmyadmin	2.11.0	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:::::::*
phpmyadmin	phpmyadmin	2.11.1.0	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:::::::*
phpmyadmin	phpmyadmin	2.11.1.1	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:::::::*
phpmyadmin	phpmyadmin	2.11.1.2	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:::::::*
phpmyadmin	phpmyadmin	2.11.2.0	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:::::::*
phpmyadmin	phpmyadmin	2.11.2.1	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:::::::*
phpmyadmin	phpmyadmin	2.11.2.2	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:::::::*
phpmyadmin	phpmyadmin	2.11.3.0	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:::::::*
phpmyadmin	phpmyadmin	2.11.4.0	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:::::::*
phpmyadmin	phpmyadmin	2.11.5.0	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:::::::*