CVE

Id
45542  
CVE No.
CVE-2010-2958  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in libraries/Error.class.php in phpMyAdmin 3.x before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to a PHP backtrace and error messages (aka debugging messages), a different vulnerability than CVE-2010-3056.  
Phase
Assigned (20100804)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
496129 45542 CVE-2010-2958 MLIST:[oss-security] 20100901 CVE Request -- phpMyAdmin - v3.6.6 -- XSS attack using debugging messages (CVE-2010-3056 discussion)  View
496130 45542 CVE-2010-2958 URL:http://www.openwall.com/lists/oss-security/2010/09/01/2  View
496131 45542 CVE-2010-2958 MLIST:[oss-security] 20100901 Re: CVE Request -- phpMyAdmin - v3.6.6 -- XSS attack using debugging messages (CVE-2010-3056 discussion)  View
496132 45542 CVE-2010-2958 URL:http://www.openwall.com/lists/oss-security/2010/09/01/3  View
496133 45542 CVE-2010-2958 CONFIRM:http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commit;h=133a77fac7d31a38703db2099a90c1b49de62e37  View
496134 45542 CVE-2010-2958 CONFIRM:http://www.phpmyadmin.net/home_page/security/PMASA-2010-6.php  View
496135 45542 CVE-2010-2958 SECUNIA:41206  View
496136 45542 CVE-2010-2958 URL:http://secunia.com/advisories/41206  View
496137 45542 CVE-2010-2958 VUPEN:ADV-2010-2242  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36695 JVNDB-2010-002475 Linux kernel の Direct Rendering Manager サブシステムの Intel i915 ドライバにおける権限昇格の脆弱性 Linux kernel の Direct Rendering Manager (DRM) サブシステムの Intel i915 ドライバ内にある Graphics Execution Manager (GEM) の drivers/gpu/drm/i915/i915_gem.c には、 pwrite および pread のオペレーションに関する処理に不備があり、メモリブロックへのポインタを適切に検証しないため、脆弱性が存在します。 CVE-2010-2962 45542 7.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002475.html  View