NVD

Id
46553  
Name
CVE-2012-5368  
Description
phpMyAdmin 3.5.x before 3.5.3 uses JavaScript code that is obtained through an HTTP session to phpmyadmin.net without SSL, which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by modifying this code.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-10-25  
Modified Date
2013-01-25  
Seq
2012-5368  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
233204 46553 CVE-2012-5368 openSUSE-SU-2012:1507  View
233205 46553 CVE-2012-5368 http://www.phpmyadmin.net/home_page/security/PMASA-2012-7.php  View
233206 46553 CVE-2012-5368 55939  View
233207 46553 CVE-2012-5368 https://github.com/phpmyadmin/phpmyadmin/commit/50edafc0884aa15d0a1aa178089ac6a1ad2eb18a  View
233208 46553 CVE-2012-5368 https://github.com/phpmyadmin/phpmyadmin/commit/a547f3d3e2cf36c6a904fa3e053fd8bddd3fbbb0  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29421 JVNDB-2012-005128 phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 phpMyAdmin には、SSL を利用しない phpmyadmin.net への HTTP セッションにより取得された JavaScript コード を用いることで、クロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2012-5368 58606 CVE-2012-5368 46553 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005128.html 2012-10-12 2012-12-07 View