CVE-2011-3598

2011-10-0802:52:52

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.003

Percentile

70.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) a web page title, related to classes/Misc.php; or the (2) return_url or (3) return_desc parameter to display.php.

Affected configurations

Nvd

Node

phppgadminphppgadminRange≤5.0.2

phppgadminphppgadminMatch2.2

phppgadminphppgadminMatch2.2.1

phppgadminphppgadminMatch3.1

phppgadminphppgadminMatch3.2

phppgadminphppgadminMatch3.3

phppgadminphppgadminMatch3.4

phppgadminphppgadminMatch3.4.1

phppgadminphppgadminMatch3.5

phppgadminphppgadminMatch3.5.2

phppgadminphppgadminMatch3.5.3

phppgadminphppgadminMatch4.1.1

phppgadminphppgadminMatch4.2.1

phppgadminphppgadminMatch4.2.2

phppgadminphppgadminMatch4.2.3

phppgadminphppgadminMatch5.0.0

phppgadminphppgadminMatch5.0.1

VendorProductVersionCPE
phppgadminphppgadmin*cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:*
phppgadminphppgadmin2.2cpe:2.3:a:phppgadmin:phppgadmin:2.2:*:*:*:*:*:*:*
phppgadminphppgadmin2.2.1cpe:2.3:a:phppgadmin:phppgadmin:2.2.1:*:*:*:*:*:*:*
phppgadminphppgadmin3.1cpe:2.3:a:phppgadmin:phppgadmin:3.1:*:*:*:*:*:*:*
phppgadminphppgadmin3.2cpe:2.3:a:phppgadmin:phppgadmin:3.2:*:*:*:*:*:*:*
phppgadminphppgadmin3.3cpe:2.3:a:phppgadmin:phppgadmin:3.3:*:*:*:*:*:*:*
phppgadminphppgadmin3.4cpe:2.3:a:phppgadmin:phppgadmin:3.4:*:*:*:*:*:*:*
phppgadminphppgadmin3.4.1cpe:2.3:a:phppgadmin:phppgadmin:3.4.1:*:*:*:*:*:*:*
phppgadminphppgadmin3.5cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
phppgadminphppgadmin3.5.2cpe:2.3:a:phppgadmin:phppgadmin:3.5.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phppgadmin	phppgadmin	*	cpe:2.3:a:phppgadmin:phppgadmin::::::::
phppgadmin	phppgadmin	2.2	cpe:2.3:a:phppgadmin:phppgadmin:2.2:::::::*
phppgadmin	phppgadmin	2.2.1	cpe:2.3:a:phppgadmin:phppgadmin:2.2.1:::::::*
phppgadmin	phppgadmin	3.1	cpe:2.3:a:phppgadmin:phppgadmin:3.1:::::::*
phppgadmin	phppgadmin	3.2	cpe:2.3:a:phppgadmin:phppgadmin:3.2:::::::*
phppgadmin	phppgadmin	3.3	cpe:2.3:a:phppgadmin:phppgadmin:3.3:::::::*
phppgadmin	phppgadmin	3.4	cpe:2.3:a:phppgadmin:phppgadmin:3.4:::::::*
phppgadmin	phppgadmin	3.4.1	cpe:2.3:a:phppgadmin:phppgadmin:3.4.1:::::::*
phppgadmin	phppgadmin	3.5	cpe:2.3:a:phppgadmin:phppgadmin:3.5:::::::*
phppgadmin	phppgadmin	3.5.2	cpe:2.3:a:phppgadmin:phppgadmin:3.5.2:::::::*