Lucene search
K

6027 matches found

OpenVAS
OpenVAS
added 2008/09/04 12:0 a.m.14 views

FreeBSD Ports: phpmyadmin

The remote host is missing an update to the system as announced in the referenced advisory. VID 9b7053fd-3ab5-11da-9484-00123ffe8333 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2008/09/04 12:0 a.m.26 views

FreeBSD Ports: phpmyadmin

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

3.5CVSS6.1AI score0.01626EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2008/08/04 7:41 p.m.23 views

CVE-2008-3457

Cross-site scripting XSS vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify...

2.6CVSS6AI score0.01804EPSS
Exploits2References1
NVD
NVD
added 2008/08/04 7:41 p.m.28 views

CVE-2008-3457

Cross-site scripting XSS vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify...

2.6CVSS5.3AI score0.01804EPSS
Exploits2References13
UbuntuCve
UbuntuCve
added 2008/08/04 7:41 p.m.30 views

CVE-2008-3456

phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack...

6.4CVSS5.9AI score0.02388EPSS
Exploits2References1
NVD
NVD
added 2008/08/04 7:41 p.m.30 views

CVE-2008-3456

phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack...

6.4CVSS6.2AI score0.02388EPSS
Exploits2References13
Prion
Prion
added 2008/08/04 7:41 p.m.18 views

Cross site scripting

phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack...

6.4CVSS6.4AI score0.02388EPSS
Exploits2References13Affected Software1
OSV
OSV
added 2008/08/04 7:41 p.m.3 views

DEBIAN-CVE-2008-3457

Cross-site scripting XSS vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify...

2.6CVSS6AI score0.01804EPSS
Exploits2References1
OSV
OSV
added 2008/08/04 7:41 p.m.9 views

CVE-2008-3456

phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack...

6.2AI score
Exploits0References13
OSV
OSV
added 2008/08/04 7:41 p.m.1 views

DEBIAN-CVE-2008-3456

phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack...

6.4CVSS6.7AI score0.02388EPSS
Exploits2References1
OSV
OSV
added 2008/08/04 7:41 p.m.6 views

CVE-2008-3457

Cross-site scripting XSS vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify...

5.3AI score
Exploits0References13
Cvelist
Cvelist
added 2008/08/04 7:0 p.m.28 views

CVE-2008-3456

phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack...

5.2AI score0.02388EPSS
Exploits2References13
CVE
CVE
added 2008/08/04 7:0 p.m.66 views

CVE-2008-3457

CVE-2008-3457 is a user-assisted XSS in phpMyAdmin’s setup.php, exploitable only in rare scenarios where an attacker can modify config/config.inc.php. Multiple disclosures (Debian DSA-1641-1, OSV, openVAS entries) confirm the vulnerability in phpMyAdmin prior to 2.11.8. Remediation per sources is...

2.6CVSS5.2AI score0.01804EPSS
Exploits2References13Affected Software1
CVE
CVE
added 2008/08/04 7:0 p.m.62 views

CVE-2008-3456

CVE-2008-3456 affects phpMyAdmin up to version 2.11.x prior to 2.11.8, where pages could be framed by remote domains, enabling cross-site framing that could facilitate spoofing/phishing. The root cause is insufficient framing protection. Upgrading to PHPMyAdmin 2.11.8.x or later fixes the issue (...

6.4CVSS5.2AI score0.02388EPSS
Exploits2References13Affected Software1
Debian CVE
Debian CVE
added 2008/08/04 7:0 p.m.19 views

CVE-2008-3457

Cross-site scripting XSS vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify...

2.6CVSS5.4AI score0.01804EPSS
Exploits2
Debian CVE
Debian CVE
added 2008/08/04 7:0 p.m.28 views

CVE-2008-3456

phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack...

6.4CVSS6.1AI score0.02388EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2008/07/31 12:0 a.m.30 views

Fedora 8 : phpMyAdmin-2.11.8.1-1.fc8 (2008-6810)

This update solves PMASA-2008-6 phpMyAdmin security announcement from 2008-07-28: Cross-site Framing; XSS in setup.php; see http://www.phpmyadmin.net/homepage/security.php?issue=PMASA-2008-6 - interface Table list pagination in navi - profiling Profiling causes query to be executed again really...

6.4CVSS5.6AI score0.02388EPSS
Exploits3References5
Tenable Nessus
Tenable Nessus
added 2008/07/31 12:0 a.m.33 views

Fedora 9 : phpMyAdmin-2.11.8.1-1.fc9 (2008-6868)

This update solves PMASA-2008-6 phpMyAdmin security announcement from 2008-07-28: Cross-site Framing; XSS in setup.php; see http://www.phpmyadmin.net/homepage/security.php?issue=PMASA-2008-6 - interface Table list pagination in navi - profiling Profiling causes query to be executed again really...

6.4CVSS5.6AI score0.02388EPSS
Exploits3References5
Fedora
Fedora
added 2008/07/30 8:9 p.m.16 views

[SECURITY] Fedora 9 Update: phpMyAdmin-2.11.8.1-1.fc9

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...

1.7AI score
Exploits0
Fedora
Fedora
added 2008/07/30 8:4 p.m.34 views

[SECURITY] Fedora 8 Update: phpMyAdmin-2.11.8.1-1.fc8

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...

5CVSS7.1AI score0.01618EPSS
Exploits1
Rows per page
Query Builder