Lucene search

K
freebsdFreeBSD58247A96-01C8-11DA-BC08-0001020EED82
HistoryApr 03, 2005 - 12:00 a.m.

phpmyadmin -- cross site scripting vulnerability

2005-04-0300:00:00
vuxml.freebsd.org
20

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.006

Percentile

78.4%

A phpMyAdmin security announcement reports:

The convcharset parameter was not correctly validated,
opening the door to a XSS attack.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchphpmyadmin< 2.6.2.r1UNKNOWN
FreeBSDanynoarchphpmyadmin< 2.6.2.r1UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.006

Percentile

78.4%