Lucene search
MitreCVELIST:CVE-2010-4480HistoryDec 08, 2010 - 3:00 p.m.
CVE-2010-4480
2010-12-0815:00:00
mitre
www.cve.org
7
error.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted BBcode tag containing “@” characters, as demonstrated using “[a@url@page]”.
References
secunia.com/advisories/42485
secunia.com/advisories/42725
www.debian.org/security/2010/dsa-2139
www.exploit-db.com/exploits/15699
www.mandriva.com/security/advisories?name=MDVSA-2011:000
www.phpmyadmin.net/home_page/security/PMASA-2010-9.php
www.securityfocus.com/bid/45633
www.vupen.com/english/advisories/2010/3133
www.vupen.com/english/advisories/2011/0001
www.vupen.com/english/advisories/2011/0027
Related
phpmyadmin
phpmyadmin
Unvalidated input on error page.
2010-12-07 00:00:00
openvas
openvas
phpMyAdmin 'error.php' Cross Site Scripting Vulnerability
2010-12-13 00:00:00
Mandriva Update for phpmyadmin MDVSA-2011:000 (phpmyadmin)
2011-01-11 00:00:00
Fedora Update for phpMyAdmin FEDORA-2011-3733
2011-04-01 00:00:00
nessus
nessus
phpMyAdmin error.php BBcode Tag XSS (PMASA-2010-9)
2011-01-06 00:00:00
Fedora 15 : phpMyAdmin-3.3.10-1.fc15 (2011-3761)
2011-03-27 00:00:00
Fedora 13 : phpMyAdmin-3.3.10-1.fc13 (2011-3733)
2011-03-30 00:00:00
prion
prion
Cross site scripting
2010-12-08 16:00:00
ubuntucve
ubuntucve
CVE-2010-4480
2010-12-08 00:00:00
exploitdb
exploitdb
phpMyAdmin - Client-Side Code Injection / Redirect Link Falsification
2010-12-06 00:00:00
nvd
nvd
CVE-2010-4480
2010-12-08 16:00:02
debiancve
debiancve
CVE-2010-4480
2010-12-08 16:00:02
cve
cve
CVE-2010-4480
2010-12-08 16:00:02
fedora
fedora
[SECURITY] Fedora 14 Update: phpMyAdmin-3.3.10-1.fc14
2011-03-29 19:52:43
[SECURITY] Fedora 15 Update: phpMyAdmin-3.3.10-1.fc15
2011-03-26 05:11:26
[SECURITY] Fedora 13 Update: phpMyAdmin-3.3.10-1.fc13
2011-03-29 19:53:51
debian
debian
[SECURITY] [DSA 2139-1] New phpmyadmin packages fix several vulnerabilities
2010-12-31 15:57:29
osv
osv
phpmyadmin - several
2010-12-31 00:00:00
securityvulns
securityvulns