PT-2011-3991 · Phpmyadmin · Phpmyadmin

Jan Lieskovsky · Published 2011-08-01 · Updated 2017-08-29 · CVE-2011-2642

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions prior to 3.3.10.3 phpMyAdmin versions 3.4.x prior to 3.4.3.2

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the table Print view implementation. These vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name in the tbl printview.php file.

Recommendations For phpMyAdmin versions prior to 3.3.10.3, update to version 3.3.10.3 or later. For phpMyAdmin versions 3.4.x prior to 3.4.3.2, update to version 3.4.3.2 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2011-2642

DSA-2286-1

Affected Products

Phpmyadmin

References · 18

• https://bugzilla.redhat.com/show_bug.cgi?id=725381 · Patch
• http://debian.org/security/2011/dsa-2286 · Vendor Advisory
• http://secunia.com/advisories/45365 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-2642 · Vendor Advisory
• http://phpmyadmin.net/home_page/security/PMASA-2011-9.php · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063410.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2642 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2011:124 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-2642 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063418.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-2642 · Vendor Advisory
• http://secunia.com/advisories/45315 · Note
• http://securityfocus.com/bid/48874 · Note
• http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=a0823be05aa5835f207c0838b9cca67d2d9a050a · Note
• http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=4bd27166c314faa37cada91533b86377f4d4d214 · Note