NVD

Id
14478  
Name
CVE-2010-3056  
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.11.x before 2.11.10.1 and 3.x before 3.3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) db_search.php, (2) db_sql.php, (3) db_structure.php, (4) js/messages.php, (5) libraries/common.lib.php, (6) libraries/database_interface.lib.php, (7) libraries/dbi/mysql.dbi.lib.php, (8) libraries/dbi/mysqli.dbi.lib.php, (9) libraries/db_info.inc.php, (10) libraries/sanitizing.lib.php, (11) libraries/sqlparser.lib.php, (12) server_databases.php, (13) server_privileges.php, (14) setup/config.php, (15) sql.php, (16) tbl_replace.php, and (17) tbl_sql.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-08-24  
Modified Date
2011-01-28  
Seq
2010-3056  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
80098 14478 CVE-2010-3056 FEDORA-2010-13249  View
80099 14478 CVE-2010-3056 FEDORA-2010-13258  View
80100 14478 CVE-2010-3056 DSA-2097  View
80101 14478 CVE-2010-3056 MDVSA-2010:163  View
80102 14478 CVE-2010-3056 MDVSA-2010:164  View
80103 14478 CVE-2010-3056 http://www.phpmyadmin.net/home_page/security/PMASA-2010-5.php  View
80104 14478 CVE-2010-3056 42584  View
80105 14478 CVE-2010-3056 ADV-2010-2223  View
80106 14478 CVE-2010-3056 ADV-2010-2231  View
80107 14478 CVE-2010-3056 http://yehg.net/lab/pr0js/advisories/phpmyadmin/%5Bphpmyadmin-3.3.5%5D_cross_site_scripting%28XSS%29  View
80108 14478 CVE-2010-3056 https://bugzilla.redhat.com/show_bug.cgi?id=625877  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39845 JVNDB-2010-005630 phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 phpMyAdmin は、以下のファイルに関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-3056 45636 CVE-2010-3056 14478 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005630.html 2010-08-20 2012-12-20 View