Lucene search
HistoryJul 01, 2009 - 1:00 p.m.
CVE-2009-2284
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.003
Percentile
68.2%
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark.
Affected configurations
Node
phpmyadminphpmyadminRangeβ€3.2.0
ORphpmyadminphpmyadminMatch2.0
ORphpmyadminphpmyadminMatch2.0.0
ORphpmyadminphpmyadminMatch2.0.1
ORphpmyadminphpmyadminMatch2.0.2
ORphpmyadminphpmyadminMatch2.0.3
ORphpmyadminphpmyadminMatch2.0.4
ORphpmyadminphpmyadminMatch2.0.5
ORphpmyadminphpmyadminMatch2.1
ORphpmyadminphpmyadminMatch2.1.0
ORphpmyadminphpmyadminMatch2.1.1
ORphpmyadminphpmyadminMatch2.1.2
ORphpmyadminphpmyadminMatch2.2
ORphpmyadminphpmyadminMatch2.2.0
ORphpmyadminphpmyadminMatch2.2.0_pre1
ORphpmyadminphpmyadminMatch2.2.0_pre2
ORphpmyadminphpmyadminMatch2.2.0_rc1
ORphpmyadminphpmyadminMatch2.2.0_rc2
ORphpmyadminphpmyadminMatch2.2.0_rc3
ORphpmyadminphpmyadminMatch2.2.2
ORphpmyadminphpmyadminMatch2.2.3
ORphpmyadminphpmyadminMatch2.2.4
ORphpmyadminphpmyadminMatch2.2.5
ORphpmyadminphpmyadminMatch2.2.6
ORphpmyadminphpmyadminMatch2.2.7_pl1
ORphpmyadminphpmyadminMatch2.2_pre1
ORphpmyadminphpmyadminMatch2.2_pre2
ORphpmyadminphpmyadminMatch2.2_rc1
ORphpmyadminphpmyadminMatch2.2_rc2
ORphpmyadminphpmyadminMatch2.2_rc3
ORphpmyadminphpmyadminMatch2.3.1
ORphpmyadminphpmyadminMatch2.3.2
ORphpmyadminphpmyadminMatch2.4.0
ORphpmyadminphpmyadminMatch2.5.0
ORphpmyadminphpmyadminMatch2.5.1
ORphpmyadminphpmyadminMatch2.5.2
ORphpmyadminphpmyadminMatch2.5.2_pl1
ORphpmyadminphpmyadminMatch2.5.3
ORphpmyadminphpmyadminMatch2.5.4
ORphpmyadminphpmyadminMatch2.5.5
ORphpmyadminphpmyadminMatch2.5.5_pl1
ORphpmyadminphpmyadminMatch2.5.5_rc1
ORphpmyadminphpmyadminMatch2.5.5_rc2
ORphpmyadminphpmyadminMatch2.5.6_rc1
ORphpmyadminphpmyadminMatch2.5.6_rc2
ORphpmyadminphpmyadminMatch2.5.7
ORphpmyadminphpmyadminMatch2.5.7_pl1
ORphpmyadminphpmyadminMatch2.6.0_pl1
ORphpmyadminphpmyadminMatch2.6.0_pl2
ORphpmyadminphpmyadminMatch2.6.0_pl3
ORphpmyadminphpmyadminMatch2.6.1
ORphpmyadminphpmyadminMatch2.6.1_pl1
ORphpmyadminphpmyadminMatch2.6.1_pl3
ORphpmyadminphpmyadminMatch2.6.1_rc1
ORphpmyadminphpmyadminMatch2.6.2
ORphpmyadminphpmyadminMatch2.6.2_dev
ORphpmyadminphpmyadminMatch2.6.2_pl1
ORphpmyadminphpmyadminMatch2.6.2_rc1
ORphpmyadminphpmyadminMatch2.6.3
ORphpmyadminphpmyadminMatch2.6.3_pl1
ORphpmyadminphpmyadminMatch2.6.4
ORphpmyadminphpmyadminMatch2.6.4_pl1
ORphpmyadminphpmyadminMatch2.6.4_pl2
ORphpmyadminphpmyadminMatch2.6.4_pl3
ORphpmyadminphpmyadminMatch2.6.4_pl4
ORphpmyadminphpmyadminMatch2.6.4_rc1
ORphpmyadminphpmyadminMatch2.7
ORphpmyadminphpmyadminMatch2.7.0
ORphpmyadminphpmyadminMatch2.7.0_beta1
ORphpmyadminphpmyadminMatch2.7.0_pl1
ORphpmyadminphpmyadminMatch2.7.0_pl2
ORphpmyadminphpmyadminMatch2.7.0_rc1
ORphpmyadminphpmyadminMatch2.7_pl1
ORphpmyadminphpmyadminMatch2.8.0
ORphpmyadminphpmyadminMatch2.8.0.1
ORphpmyadminphpmyadminMatch2.8.0.2
ORphpmyadminphpmyadminMatch2.8.0.3
ORphpmyadminphpmyadminMatch2.8.1
ORphpmyadminphpmyadminMatch2.8.1_dev
ORphpmyadminphpmyadminMatch2.8.2
ORphpmyadminphpmyadminMatch2.8.3
ORphpmyadminphpmyadminMatch2.8.4
ORphpmyadminphpmyadminMatch2.9
ORphpmyadminphpmyadminMatch2.9.0
ORphpmyadminphpmyadminMatch2.9.0.1
ORphpmyadminphpmyadminMatch2.9.0.2
ORphpmyadminphpmyadminMatch2.9.0.3
ORphpmyadminphpmyadminMatch2.9.0_beta1
ORphpmyadminphpmyadminMatch2.9.0_dev
ORphpmyadminphpmyadminMatch2.9.0_rc1
ORphpmyadminphpmyadminMatch2.9.1
ORphpmyadminphpmyadminMatch2.9.1.1
ORphpmyadminphpmyadminMatch2.9.1_rc1
ORphpmyadminphpmyadminMatch2.9.1_rc2
ORphpmyadminphpmyadminMatch2.9.2
ORphpmyadminphpmyadminMatch2.9_rc1
ORphpmyadminphpmyadminMatch2.10.0
ORphpmyadminphpmyadminMatch2.10.0.0
ORphpmyadminphpmyadminMatch2.10.0.1
ORphpmyadminphpmyadminMatch2.10.0.2
ORphpmyadminphpmyadminMatch2.10.1
ORphpmyadminphpmyadminMatch2.10.01
ORphpmyadminphpmyadminMatch2.10.1.0
ORphpmyadminphpmyadminMatch2.10.2
ORphpmyadminphpmyadminMatch2.10.2.0
ORphpmyadminphpmyadminMatch2.10.3
ORphpmyadminphpmyadminMatch2.10.3.0
ORphpmyadminphpmyadminMatch2.10.3rc1
ORphpmyadminphpmyadminMatch2.11.0
ORphpmyadminphpmyadminMatch2.11.0beta1
ORphpmyadminphpmyadminMatch2.11.0rc1
ORphpmyadminphpmyadminMatch2.11.0.0
ORphpmyadminphpmyadminMatch2.11.0beta1
ORphpmyadminphpmyadminMatch2.11.0rc1
ORphpmyadminphpmyadminMatch2.11.1
ORphpmyadminphpmyadminMatch2.11.1rc1
ORphpmyadminphpmyadminMatch2.11.1.0
ORphpmyadminphpmyadminMatch2.11.1.1
ORphpmyadminphpmyadminMatch2.11.1.2
ORphpmyadminphpmyadminMatch2.11.1rc1
ORphpmyadminphpmyadminMatch2.11.2
ORphpmyadminphpmyadminMatch2.11.2.0
ORphpmyadminphpmyadminMatch2.11.2.1
ORphpmyadminphpmyadminMatch2.11.2.2
ORphpmyadminphpmyadminMatch2.11.3
ORphpmyadminphpmyadminMatch2.11.3rc1
ORphpmyadminphpmyadminMatch2.11.3.0
ORphpmyadminphpmyadminMatch2.11.3rc1
ORphpmyadminphpmyadminMatch2.11.4
ORphpmyadminphpmyadminMatch2.11.4rc1
ORphpmyadminphpmyadminMatch2.11.4.0
ORphpmyadminphpmyadminMatch2.11.4rc1
ORphpmyadminphpmyadminMatch2.11.5
ORphpmyadminphpmyadminMatch2.11.5rc1
ORphpmyadminphpmyadminMatch2.11.5.0
ORphpmyadminphpmyadminMatch2.11.5.1
ORphpmyadminphpmyadminMatch2.11.5.2
ORphpmyadminphpmyadminMatch2.11.5rc1
ORphpmyadminphpmyadminMatch2.11.6
ORphpmyadminphpmyadminMatch2.11.6rc1
ORphpmyadminphpmyadminMatch2.11.6.0
ORphpmyadminphpmyadminMatch2.11.6rc1
ORphpmyadminphpmyadminMatch2.11.7
ORphpmyadminphpmyadminMatch2.11.7.0
ORphpmyadminphpmyadminMatch2.11.8
ORphpmyadminphpmyadminMatch2.11.9
ORphpmyadminphpmyadminMatch2.11.9.0
ORphpmyadminphpmyadminMatch2.11.9.1
ORphpmyadminphpmyadminMatch2.11.9.2
ORphpmyadminphpmyadminMatch2.11.9.3
ORphpmyadminphpmyadminMatch2.11.9.4
ORphpmyadminphpmyadminMatch3.0.0
ORphpmyadminphpmyadminMatch3.0.0-alpha
ORphpmyadminphpmyadminMatch3.0.0-beta
ORphpmyadminphpmyadminMatch3.0.0-rc1
ORphpmyadminphpmyadminMatch3.0.1
ORphpmyadminphpmyadminMatch3.0.1-rc1
ORphpmyadminphpmyadminMatch3.0.1.1
ORphpmyadminphpmyadminMatch3.1.0
ORphpmyadminphpmyadminMatch3.1.0-beta1
ORphpmyadminphpmyadminMatch3.1.0.0
ORphpmyadminphpmyadminMatch3.1.1
ORphpmyadminphpmyadminMatch3.1.1rc1
ORphpmyadminphpmyadminMatch3.1.2
ORphpmyadminphpmyadminMatch3.1.2rc1
ORphpmyadminphpmyadminMatch3.1.3
ORphpmyadminphpmyadminMatch3.1.31
ORphpmyadminphpmyadminMatch3.1.3rc1
ORphpmyadminphpmyadminMatch3.1.3-rc1
ORphpmyadminphpmyadminMatch3.1.3.1
ORphpmyadminphpmyadminMatch3.1.3.2
ORphpmyadminphpmyadminMatch3.1.4
ORphpmyadminphpmyadminMatch3.1.4-rc2
ORphpmyadminphpmyadminMatch3.1.5
ORphpmyadminphpmyadminMatch3.1.5-rc1
ORphpmyadminphpmyadminMatch3.2.0-beta1
ORphpmyadminphpmyadminMatch3.2.0-rc1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpmyadmin | phpmyadmin | * | cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.0 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.0.0 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.0:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.0.1 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.0.2 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.0.3 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.0.4 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.0.5 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.1 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 2.1.0 | cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.0:*:*:*:*:*:*:* |
References
secunia.com/advisories/35649
secunia.com/advisories/35715
www.mandriva.com/security/advisories?name=MDVSA-2009:192
www.phpmyadmin.net/home_page/security/PMASA-2009-5.php
www.redhat.com/archives/fedora-package-announce/2009-July/msg00150.html
www.redhat.com/archives/fedora-package-announce/2009-July/msg00152.html
www.redhat.com/archives/fedora-package-announce/2009-July/msg00256.html
Related
ubuntucve
ubuntucve
CVE-2009-2284
2009-07-01 00:00:00
nessus
nessus
Fedora 11 : phpMyAdmin-3.2.0.1-1.fc11 (2009-7329)
2009-07-06 00:00:00
Fedora 10 : phpMyAdmin-3.2.0.1-1.fc10 (2009-7340)
2009-07-06 00:00:00
Fedora 9 : phpMyAdmin-3.2.0.1-1.fc9 (2009-7337)
2009-07-06 00:00:00
openvas
openvas
Mandrake Security Advisory MDVSA-2009:192 (phpmyadmin)
2009-08-17 00:00:00
Fedora Core 11 FEDORA-2009-7329 (phpMyAdmin)
2009-07-06 00:00:00
phpMyAdmin SQL bookmark XSS Vulnerability
2009-07-03 00:00:00
cve
cve
CVE-2009-2284
2009-07-01 13:00:01
freebsd
freebsd
phpmyadmin -- XSS vulnerability
2009-06-30 00:00:00
redhatcve
redhatcve
CVE-2009-2284
2019-10-04 21:45:14
cvelist
cvelist
CVE-2009-2284
2009-07-01 12:26:00
phpmyadmin
phpmyadmin
XSS vulnerability
2009-06-30 00:00:00
debiancve
debiancve
CVE-2009-2284
2009-07-01 13:00:01
prion
prion
Cross site scripting
2009-07-01 13:00:00
seebug
seebug
phpMyAdmin SQLδΉ¦ηΎHTML注ε
₯ζΌζ΄
2009-07-03 00:00:00
securityvulns
securityvulns
[ MDVSA-2009:192 ] phpmyadmin
2009-08-09 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.003
Percentile
68.2%
Related for NVD:CVE-2009-2284