Lucene search

K
freebsdFreeBSD753F8185-5BA9-42A4-BE02-3F55EE580093
HistoryNov 29, 2010 - 12:00 a.m.

phpMyAdmin -- XSS attack in database search

2010-11-2900:00:00
vuxml.freebsd.org
25

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.004

Percentile

73.1%

phpMyAdmin team reports:

It was possible to conduct a XSS attack using spoofed request on the
db search script.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchphpmyadmin<ย 3.3.8.1UNKNOWN
FreeBSDanynoarchphpmyadmin211<ย 2.11.11.1UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.004

Percentile

73.1%