Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-4329
HistoryDec 02, 2010 - 4:22 p.m.

CVE-2010-4329

2010-12-0216:22:21
CWE-79
[email protected]
web.nvd.nist.gov
6

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.004

Percentile

73.1%

JSON

Cross-site scripting (XSS) vulnerability in the PMA_linkOrButton function in libraries/common.lib.php in the database (db) search script in phpMyAdmin 2.11.x before 2.11.11.1 and 3.x before 3.3.8.1 allows remote attackers to inject arbitrary web script or HTML via a crafted request.

Affected configurations

Nvd
Node
phpmyadminphpmyadminMatch2.11.0
OR
phpmyadminphpmyadminMatch2.11.1.0
OR
phpmyadminphpmyadminMatch2.11.1.1
OR
phpmyadminphpmyadminMatch2.11.1.2
OR
phpmyadminphpmyadminMatch2.11.2.0
OR
phpmyadminphpmyadminMatch2.11.2.1
OR
phpmyadminphpmyadminMatch2.11.2.2
OR
phpmyadminphpmyadminMatch2.11.3.0
OR
phpmyadminphpmyadminMatch2.11.4.0
OR
phpmyadminphpmyadminMatch2.11.5.0
OR
phpmyadminphpmyadminMatch2.11.5.1
OR
phpmyadminphpmyadminMatch2.11.5.2
OR
phpmyadminphpmyadminMatch2.11.6.0
OR
phpmyadminphpmyadminMatch2.11.7.0
OR
phpmyadminphpmyadminMatch2.11.7.1
OR
phpmyadminphpmyadminMatch2.11.8.0
OR
phpmyadminphpmyadminMatch2.11.9.0
OR
phpmyadminphpmyadminMatch2.11.9.1
OR
phpmyadminphpmyadminMatch2.11.9.2
OR
phpmyadminphpmyadminMatch2.11.9.3
OR
phpmyadminphpmyadminMatch2.11.9.4
OR
phpmyadminphpmyadminMatch2.11.9.5
OR
phpmyadminphpmyadminMatch2.11.9.6
OR
phpmyadminphpmyadminMatch2.11.10.0
OR
phpmyadminphpmyadminMatch2.11.10.1
OR
phpmyadminphpmyadminMatch2.11.11
OR
phpmyadminphpmyadminMatch3.0.0
OR
phpmyadminphpmyadminMatch3.0.0alpha
OR
phpmyadminphpmyadminMatch3.0.0beta
OR
phpmyadminphpmyadminMatch3.0.0rc1
OR
phpmyadminphpmyadminMatch3.0.1
OR
phpmyadminphpmyadminMatch3.0.1rc1
OR
phpmyadminphpmyadminMatch3.0.1.1
OR
phpmyadminphpmyadminMatch3.1.0
OR
phpmyadminphpmyadminMatch3.1.0beta1
OR
phpmyadminphpmyadminMatch3.1.1
OR
phpmyadminphpmyadminMatch3.1.1rc1
OR
phpmyadminphpmyadminMatch3.1.2
OR
phpmyadminphpmyadminMatch3.1.2rc1
OR
phpmyadminphpmyadminMatch3.1.3
OR
phpmyadminphpmyadminMatch3.1.3rc1
OR
phpmyadminphpmyadminMatch3.1.3.1
OR
phpmyadminphpmyadminMatch3.1.3.2
OR
phpmyadminphpmyadminMatch3.1.4
OR
phpmyadminphpmyadminMatch3.1.4rc2
OR
phpmyadminphpmyadminMatch3.1.5
OR
phpmyadminphpmyadminMatch3.1.5rc1
OR
phpmyadminphpmyadminMatch3.2.0
OR
phpmyadminphpmyadminMatch3.2.0beta1
OR
phpmyadminphpmyadminMatch3.2.0rc1
OR
phpmyadminphpmyadminMatch3.2.1
OR
phpmyadminphpmyadminMatch3.2.1rc1
OR
phpmyadminphpmyadminMatch3.2.2
OR
phpmyadminphpmyadminMatch3.2.2rc1
OR
phpmyadminphpmyadminMatch3.3.0.0
OR
phpmyadminphpmyadminMatch3.3.1.0
OR
phpmyadminphpmyadminMatch3.3.2.0
OR
phpmyadminphpmyadminMatch3.3.3.0
OR
phpmyadminphpmyadminMatch3.3.4.0
OR
phpmyadminphpmyadminMatch3.3.5.0
OR
phpmyadminphpmyadminMatch3.3.5.1
OR
phpmyadminphpmyadminMatch3.3.6
OR
phpmyadminphpmyadminMatch3.3.7
OR
phpmyadminphpmyadminMatch3.3.8

References

Related

cvelist 1
openvas 11
phpmyadmin 1
prion 1
nessus 4
fedora 2
freebsd 1
debiancve 1
cve 1
ubuntucve 1
seebug 1
securityvulns 4
osv 1
debian 1
cvelist
cvelist
CVE-2010-4329
2010-12-02 16:00:00
openvas
openvas
FreeBSD Ports: phpMyAdmin
2011-01-24 00:00:00
Mandriva Update for phpmyadmin MDVSA-2010:244 (phpmyadmin)
2010-12-09 00:00:00
Fedora Update for phpMyAdmin FEDORA-2010-18371
2010-12-23 00:00:00
phpmyadmin
phpmyadmin
XSS attack in database search.
2010-11-29 00:00:00
prion
prion
Cross site scripting
2010-12-02 16:22:00
nessus
nessus
Fedora 14 : phpMyAdmin-3.3.8.1-1.fc14 (2010-18343)
2010-12-09 00:00:00
FreeBSD : phpMyAdmin -- XSS attack in database search (753f8185-5ba9-42a4-be02-3f55ee580093)
2010-11-30 00:00:00
Fedora 13 : phpMyAdmin-3.3.8.1-1.fc13 (2010-18371)
2010-12-09 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: phpMyAdmin-3.3.8.1-1.fc14
2010-12-08 21:34:18
[SECURITY] Fedora 13 Update: phpMyAdmin-3.3.8.1-1.fc13
2010-12-08 21:36:02
freebsd
freebsd
phpMyAdmin -- XSS attack in database search
2010-11-29 00:00:00
debiancve
debiancve
CVE-2010-4329
2010-12-02 16:22:21
cve
cve
CVE-2010-4329
2010-12-02 16:22:21
ubuntucve
ubuntucve
CVE-2010-4329
2010-12-02 00:00:00
seebug
seebug
phpMyAdminๆ•ฐๆฎๅบ“ๆœ็ดข่ทจ็ซ™่„šๆœฌๆ‰ง่กŒๆผๆดž
2010-12-09 00:00:00
securityvulns
securityvulns
[ MDVSA-2010:244 ] phpmyadmin
2010-12-01 00:00:00
[SECURITY] [DSA 2139-1] New phpmyadmin packages fix several vulnerabilities
2011-01-03 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2011-01-03 00:00:00
osv
osv
phpmyadmin - several
2010-12-31 00:00:00
debian
debian
[SECURITY] [DSA 2139-1] New phpmyadmin packages fix several vulnerabilities
2010-12-31 15:57:29

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.004

Percentile

73.1%

JSON
Related for NVD:CVE-2010-4329
cvelist1openvas11phpmyadmin1prion1nessus4fedora2freebsd1debiancve1cve1ubuntucve1seebug1securityvulns4osv1debian1