PT-2008-5985 · Phpmyadmin+4 · Phpmyadmin

Publicado 2008-10-28 · Atualizado 2018-10-11 · CVE-2008-4775

NVD

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in pmd pdf.php in phpMyAdmin 3.0.0, and possibly other versions including 2.11.9.2 and 3.0.1, when register globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the db parameter, a different vector than CVE-2006-6942 and CVE-2007-5977.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-4775

Produtos afetados

Phpmyadmin

Referências · 16

• 🔥 https://exploit-db.com/exploits/32531 · Exploit
• http://securityfocus.com/bid/31928 · Nota
• http://securityfocus.com/archive/1/497815/100/0/threaded · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4775 · Nota
• https://security-tracker.debian.org/tracker/CVE-2008-4775 · Aviso do Fabricante
• https://redhat.com/archives/fedora-package-announce/2008-October/msg00925.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2008-4775 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200903-32.xml · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46136 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-4775 · Aviso do Fabricante
• http://secunia.com/advisories/32482 · Aviso do Fabricante
• http://securityreason.com/securityalert/4516 · Nota
• http://vupen.com/english/advisories/2008/2943 · Nota
• https://redhat.com/archives/fedora-package-announce/2008-October/msg00908.html · Aviso do Fabricante
• http://secunia.com/advisories/32449 · Aviso do Fabricante