Lucene search
K

6026 matches found

NVD
NVD
added 2011/11/17 7:55 p.m.16 views

CVE-2011-3646

phpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive information via an array-typed jsframe parameter to phpmyadmin.css.php, which reveals the installation path in an error message...

5CVSS6AI score0.0056EPSS
Exploits0References6
OSV
OSV
added 2011/11/17 7:55 p.m.1 views

DEBIAN-CVE-2011-3646

phpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive information via an array-typed jsframe parameter to phpmyadmin.css.php, which reveals the installation path in an error message...

5CVSS6.7AI score0.0056EPSS
Exploits0References1
Prion
Prion
added 2011/11/17 7:55 p.m.19 views

Xxe

The simplexmlloadstring function in the XML import plug-in libraries/import/xml.php in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity XXE injection...

4.3CVSS6.8AI score0.12434EPSS
Exploits7References17Affected Software3
Prion
Prion
added 2011/11/17 7:55 p.m.17 views

Design/Logic Flaw

phpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive information via an array-typed jsframe parameter to phpmyadmin.css.php, which reveals the installation path in an error message...

5CVSS6.5AI score0.0056EPSS
Exploits0References6Affected Software1
UbuntuCve
UbuntuCve
added 2011/11/17 7:55 p.m.23 views

CVE-2011-3646

phpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive information via an array-typed jsframe parameter to phpmyadmin.css.php, which reveals the installation path in an error message...

5CVSS5.9AI score0.0056EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2011/11/17 7:55 p.m.27 views

CVE-2011-4107

The simplexmlloadstring function in the XML import plug-in libraries/import/xml.php in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity XXE injection...

6.5CVSS7AI score0.12434EPSS
Exploits7References1
Debian CVE
Debian CVE
added 2011/11/17 7:0 p.m.25 views

CVE-2011-4107

The simplexmlloadstring function in the XML import plug-in libraries/import/xml.php in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity XXE injection...

6.5CVSS6.5AI score0.12434EPSS
Exploits7
CVE
CVE
added 2011/11/17 7:0 p.m.93 views

CVE-2011-4107

CVE-2011-4107 affects phpMyAdmin 3.3.x (before 3.3.10.5) and 3.4.x (before 3.4.7.1). The vulnerability resides in the XML import plug‑in (libraries/import/xml.php) where simplexml_load_string can process XML data containing external entity references, enabling a remote authenticated user to read ...

6.5CVSS6.1AI score0.12434EPSS
Exploits7References17Affected Software1
CVE
CVE
added 2011/11/17 7:0 p.m.60 views

CVE-2011-3646

CVE-2011-3646 affects phpMyAdmin 3.4.x before 3.4.6. The vulnerability lies in phpmyadmin.css.php where an array-typed js_frame parameter can trigger an error message that reveals the installation path, causing information disclosure. The issue is tied to phpMyAdmin’s handling of the parameter, e...

5CVSS6AI score0.0056EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2011/11/17 7:0 p.m.36 views

CVE-2011-4107

The simplexmlloadstring function in the XML import plug-in libraries/import/xml.php in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity XXE injection...

6.3AI score0.12434EPSS
Exploits7References17
Cvelist
Cvelist
added 2011/11/17 7:0 p.m.26 views

CVE-2011-3646

phpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive information via an array-typed jsframe parameter to phpmyadmin.css.php, which reveals the installation path in an error message...

6.1AI score0.0056EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2011/11/17 7:0 p.m.21 views

CVE-2011-3646

phpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive information via an array-typed jsframe parameter to phpmyadmin.css.php, which reveals the installation path in an error message...

5CVSS6AI score0.0056EPSS
Exploits0
Typo3
Typo3
added 2011/11/15 12:0 a.m.13 views

Multiple vulnerabilities in extension phpMyAdmin (phpmyadmin)

It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to Local file inclusion. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.11.8 and below Vulnerability Type: Local file inclusion...

7AI score
Exploits0Affected Software1
OpenVAS
OpenVAS
added 2011/11/14 12:0 a.m.32 views

Fedora Update for phpMyAdmin FEDORA-2011-15472

Check for the Version of phpMyAdmin OpenVAS Vulnerability Test Fedora Update for phpMyAdmin FEDORA-2011-15472 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

5CVSS6.5AI score0.0056EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2011/11/14 12:0 a.m.27 views

Fedora 15 : phpMyAdmin-3.4.7-1.fc15 (2011-15469)

"Changes for 3.4.7.0 2011-10-23 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Fedora Security Advisory 2011-15469. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid56798;...

5CVSS5.2AI score0.0056EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2011/11/14 12:0 a.m.28 views

Fedora 16 : phpMyAdmin-3.4.7-1.fc16 (2011-15460)

"Changes for 3.4.7.0 2011-10-23 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Fedora Security Advisory 2011-15460. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid56797;...

5CVSS5.2AI score0.0056EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2011/11/14 12:0 a.m.35 views

Fedora 14 : phpMyAdmin-3.4.7-1.fc14 (2011-15472)

"Changes for 3.4.7.0 2011-10-23 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Fedora Security Advisory 2011-15472. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid56799;...

5CVSS5.2AI score0.0056EPSS
Exploits1References6
OpenVAS
OpenVAS
added 2011/11/14 12:0 a.m.26 views

Fedora Update for phpMyAdmin FEDORA-2011-15469

Check for the Version of phpMyAdmin OpenVAS Vulnerability Test Fedora Update for phpMyAdmin FEDORA-2011-15469 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

5CVSS6.5AI score0.0056EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2011/11/14 12:0 a.m.21 views

Fedora Update for phpMyAdmin FEDORA-2011-15469

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS6.5AI score0.0056EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2011/11/14 12:0 a.m.21 views

Fedora Update for phpMyAdmin FEDORA-2011-15472

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS6.5AI score0.0056EPSS
Exploits1References2
Rows per page
Query Builder