Lucene search
RootSSV:60440HistoryOct 16, 2012 - 12:00 a.m.
phpMyAdmin 3.5.x HTML注入漏洞
2012-10-1600:00:00
Root
www.seebug.org
46
EPSS
0.001
Percentile
48.1%
Bugtraq ID:55925
CVE ID:CVE-2012-5339
phpMyAdmin是一款基于PHP的MySQL管理程序。
phpMyAdmin Trigger, Procedure和Event页面不正确转义HTML输出，使用特殊名创建/修改trigger, event或procedure时，可触发跨站脚本攻击，可获得敏感信息或劫持用户会话。
0
phpMyAdmin 3.5.x
厂商解决方案
phpMyAdmin 3.5.3已经修复此漏洞，建议用户下载使用：
http://www.phpmyadmin.net/
Related
osv
osv
phpMyAdmin multiple cross-site scripting vulnerabilities
2022-05-17 05:16:32
phpMyAdmin-4.6.5.2-1.1 on GA media
2024-06-15 00:00:00
prion
prion
Cross site scripting
2012-10-25 10:51:00
ubuntucve
ubuntucve
CVE-2012-5339
2012-10-25 00:00:00
nvd
nvd
CVE-2012-5339
2012-10-25 10:51:28
github
github
phpMyAdmin multiple cross-site scripting vulnerabilities
2022-05-17 05:16:32
cvelist
cvelist
CVE-2012-5339
2012-10-25 10:00:00
debiancve
debiancve
CVE-2012-5339
2012-10-25 10:51:28
phpmyadmin
phpmyadmin
cve
cve
CVE-2012-5339
2012-10-25 10:51:28
openvas
openvas
phpMyAdmin 3.5.x < 3.5.3 Multiple Vulnerabilities (PMASA-2012-6, PMASA-2012-7) - Windows
2017-09-11 00:00:00
phpMyAdmin 3.5.x < 3.5.3 Multiple Vulnerabilities (PMASA-2012-6, PMASA-2012-7) - Linux
2017-09-11 00:00:00
FreeBSD Ports: phpMyAdmin
2012-10-22 00:00:00
freebsd
freebsd
nessus
nessus
openSUSE Security Update : phpMyAdmin (openSUSE-SU-2012:1507-1)
2014-06-13 00:00:00