Lucene search
RedhatCVE-2010-2958HistorySep 08, 2010 - 8:00 p.m.
CVE-2010-2958
2010-09-0820:00:03
CWE-79
redhat
web.nvd.nist.gov
35
cve-2010-2958
cross-site scripting
xss vulnerability
phpmyadmin 3.x
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.005
Percentile
76.4%
Cross-site scripting (XSS) vulnerability in libraries/Error.class.php in phpMyAdmin 3.x before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to a PHP backtrace and error messages (aka debugging messages), a different vulnerability than CVE-2010-3056.
Affected configurations
Node
phpmyadminphpmyadminMatch3.0.0
ORphpmyadminphpmyadminMatch3.0.0alpha
ORphpmyadminphpmyadminMatch3.0.0beta
ORphpmyadminphpmyadminMatch3.0.0rc1
ORphpmyadminphpmyadminMatch3.0.1
ORphpmyadminphpmyadminMatch3.0.1rc1
ORphpmyadminphpmyadminMatch3.0.1.1
ORphpmyadminphpmyadminMatch3.1.0
ORphpmyadminphpmyadminMatch3.1.0beta1
ORphpmyadminphpmyadminMatch3.1.1
ORphpmyadminphpmyadminMatch3.1.1rc1
ORphpmyadminphpmyadminMatch3.1.2
ORphpmyadminphpmyadminMatch3.1.2rc1
ORphpmyadminphpmyadminMatch3.1.3
ORphpmyadminphpmyadminMatch3.1.3rc1
ORphpmyadminphpmyadminMatch3.1.3.1
ORphpmyadminphpmyadminMatch3.1.3.2
ORphpmyadminphpmyadminMatch3.1.4
ORphpmyadminphpmyadminMatch3.1.4rc2
ORphpmyadminphpmyadminMatch3.1.5
ORphpmyadminphpmyadminMatch3.1.5rc1
ORphpmyadminphpmyadminMatch3.2.0
ORphpmyadminphpmyadminMatch3.2.0beta1
ORphpmyadminphpmyadminMatch3.2.0rc1
ORphpmyadminphpmyadminMatch3.2.1
ORphpmyadminphpmyadminMatch3.2.1rc1
ORphpmyadminphpmyadminMatch3.2.2
ORphpmyadminphpmyadminMatch3.2.2rc1
ORphpmyadminphpmyadminMatch3.3.0.0
ORphpmyadminphpmyadminMatch3.3.1.0
ORphpmyadminphpmyadminMatch3.3.2.0
ORphpmyadminphpmyadminMatch3.3.3.0
ORphpmyadminphpmyadminMatch3.3.4.0
ORphpmyadminphpmyadminMatch3.3.5.0
ORphpmyadminphpmyadminMatch3.3.5.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpmyadmin | phpmyadmin | 3.0.0 | cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 3.0.0 | cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:alpha:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 3.0.0 | cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:beta:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 3.0.0 | cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:rc1:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 3.0.1 | cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 3.0.1 | cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:rc1:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 3.0.1.1 | cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1.1:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 3.1.0 | cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 3.1.0 | cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:beta1:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 3.1.1 | cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:* |
References
phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=133a77fac7d31a38703db2099a90c1b49de62e37
secunia.com/advisories/41206
www.openwall.com/lists/oss-security/2010/09/01/2
www.openwall.com/lists/oss-security/2010/09/01/3
www.phpmyadmin.net/home_page/security/PMASA-2010-6.php
www.vupen.com/english/advisories/2010/2242
Related
cvelist
cvelist
CVE-2010-2958
2010-09-08 19:00:00
CVE-2010-3056
2010-08-24 19:00:00
ubuntucve
ubuntucve
CVE-2010-2958
2010-09-08 00:00:00
CVE-2010-3056
2010-08-24 00:00:00
nvd
nvd
CVE-2010-2958
2010-09-08 20:00:03
CVE-2010-3056
2010-08-24 20:00:02
prion
prion
Cross site scripting
2010-09-08 20:00:00
Cross site scripting
2010-08-24 20:00:00
debiancve
debiancve
CVE-2010-2958
2010-09-08 20:00:03
CVE-2010-3056
2010-08-24 20:00:02
openvas
openvas
phpMyAdmin Debug Backtrace Cross Site Scripting Vulnerability
2010-09-02 00:00:00
Fedora Update for phpMyAdmin FEDORA-2010-13402
2010-12-02 00:00:00
Fedora Update for phpMyAdmin FEDORA-2010-13402
2010-12-02 00:00:00
phpmyadmin
phpmyadmin
XSS attack using debugging messages.
2010-08-30 00:00:00
Several XSS vulnerabilities were found in the code.
2010-08-20 00:00:00
nessus
nessus
Fedora 14 : phpMyAdmin-3.3.5.1-1.fc14 (2010-13402)
2010-08-24 00:00:00
FreeBSD : phpmyadmin -- Several XSS vulnerabilities (274922b8-ad20-11df-af1f-00e0814cab4e)
2010-08-23 00:00:00
Fedora 13 : phpMyAdmin-3.3.5.1-1.fc13 (2010-13249)
2010-08-23 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: phpMyAdmin-3.3.5.1-1.fc13
2010-08-21 04:29:27
[SECURITY] Fedora 14 Update: phpMyAdmin-3.3.5.1-1.fc14
2010-08-24 02:01:01
[SECURITY] Fedora 12 Update: phpMyAdmin-3.3.5.1-1.fc12
2010-08-21 04:32:20
cve
cve
CVE-2010-3056
2010-08-24 20:00:02
typo3
typo3
TYPO3 Security Bulletin
2010-08-23 00:00:00
freebsd
freebsd
phpmyadmin -- Several XSS vulnerabilities
2010-08-09 00:00:00
debian
debian
[SECURITY] [DSA 2097-2] New phpmyadmin packages fix several vulnerabilities
2010-09-11 14:36:05
[SECURITY] [DSA 2097-1] New phpmyadmin packages fix several vulnerabilities
2010-08-29 10:26:56
securityvulns
securityvulns
osv
osv
phpmyadmin - several vulnerabilities
2010-08-29 00:00:00
phpmyadmin - several vulnerabilities
2010-08-29 00:00:00
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2012-01-04 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.005
Percentile
76.4%
Related for CVE-2010-2958