NVD

Id
2854  
Name
CVE-2008-2960  
Description
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.11.7, when register_globals is enabled and .htaccess support is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving scripts in libraries/.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-07-02  
Modified Date
2011-03-07  
Seq
2008-2960  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
18172 2854 CVE-2008-2960 SUSE-SR:2009:003  View
18173 2854 CVE-2008-2960 MDVSA-2008:131  View
18174 2854 CVE-2008-2960 [oss-security] 20080716 Re: CVE request: phpmyadmin < 2.11.7.1  View
18175 2854 CVE-2008-2960 http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0  View
18176 2854 CVE-2008-2960 http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-4  View
18177 2854 CVE-2008-2960 ADV-2008-1904  View
18178 2854 CVE-2008-2960 phpmyadmin-libraryfiles-xss(43320)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50640 JVNDB-2008-005950 phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 phpMyAdmin は、register_globals が有効になっている際、libraries/ 配下のスクリプト関連に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-2960 33073 CVE-2008-2960 2854 2.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005950.html 2008-06-23 2012-12-20 View