CVE

Id
58611  
CVE No.
CVE-2012-5368  
Status
Candidate  
Description
phpMyAdmin 3.5.x before 3.5.3 uses JavaScript code that is obtained through an HTTP session to phpmyadmin.net without SSL, which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by modifying this code.  
Phase
Assigned (20121010)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
600570 58611 CVE-2012-5368 CONFIRM:http://www.phpmyadmin.net/home_page/security/PMASA-2012-7.php  View
600571 58611 CVE-2012-5368 CONFIRM:https://github.com/phpmyadmin/phpmyadmin/commit/50edafc0884aa15d0a1aa178089ac6a1ad2eb18a  View
600572 58611 CVE-2012-5368 CONFIRM:https://github.com/phpmyadmin/phpmyadmin/commit/a547f3d3e2cf36c6a904fa3e053fd8bddd3fbbb0  View
600573 58611 CVE-2012-5368 SUSE:openSUSE-SU-2012:1507  View
600574 58611 CVE-2012-5368 URL:http://lists.opensuse.org/opensuse-updates/2012-11/msg00033.html  View
600575 58611 CVE-2012-5368 BID:55939  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29872 JVNDB-2012-005579 Oracle Java SE および OpenJDK におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 Oracle Java SE および OpenJDK は、ハッシュ衝突を想定した制限を適切に行わずにハッシュ値を算出するため、サービス運用妨害 (CPU 資源の消費) 状態となる脆弱性が存在します。 CVE-2012-5373 58611 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005579.html  View