CVE-2010-4480

2010-12-0816:00:02

CWE-79

mitre

web.nvd.nist.gov

107

cve-2010-4480

phpmyadmin

xss

cross-site scripting

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.016

Percentile

87.5%

JSON

error.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted BBcode tag containing “@” characters, as demonstrated using “[a@url@page]”.

Affected configurations

Nvd

Node

phpmyadminphpmyadminMatch3.3.8.1

phpmyadminphpmyadminMatch3.3.9.0

VendorProductVersionCPE
phpmyadminphpmyadmin3.3.8.1cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.8.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin3.3.9.0cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.9.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpmyadmin	phpmyadmin	3.3.8.1	cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.8.1:::::::*
phpmyadmin	phpmyadmin	3.3.9.0	cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.9.0:::::::*