PT-2012-5953 · Phpmyadmin · Phpmyadmin

Mike Cardwell · Publicado 2012-10-25 · Atualizado 2024-06-15 · CVE-2012-5368

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.5.x through 3.5.2

Description The issue allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks. This is due to the use of JavaScript code obtained through an HTTP session to phpmyadmin.net without SSL, which can be modified by attackers.

Recommendations For phpMyAdmin versions 3.5.x through 3.5.2, update to version 3.5.3 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-5368

GHSA-XPXP-V33M-5JP9

OPENSUSE-SU-2024:10054-1

Produtos afetados

Phpmyadmin

Referências · 134

• https://github.com/phpmyadmin/phpmyadmin/commit/50edafc0884aa15d0a1aa178089ac6a1ad2eb18a · Correção
• https://github.com/phpmyadmin/phpmyadmin/commit/a547f3d3e2cf36c6a904fa3e053fd8bddd3fbbb0 · Correção
• https://suse.com/security/cve/CVE-2016-9859 · Nota
• https://osv.dev/vulnerability/GHSA-xpxp-v33m-5jp9 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-9865 · Nota
• https://suse.com/security/cve/CVE-2015-3903 · Nota
• https://suse.com/security/cve/CVE-2016-5706 · Nota
• https://suse.com/security/cve/CVE-2013-3241 · Nota
• https://suse.com/security/cve/CVE-2016-2044 · Nota
• https://suse.com/security/cve/CVE-2016-5703 · Nota
• https://suse.com/security/cve/CVE-2013-4995 · Nota
• https://suse.com/security/cve/CVE-2016-2038 · Nota
• https://suse.com/security/cve/CVE-2016-6618 · Nota
• https://suse.com/security/cve/CVE-2016-6630 · Nota
• https://suse.com/security/cve/CVE-2013-4999 · Nota