CVE-2008-3457
Debian Linux Security Advisory 1641-1
Severity Score
6.1
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify config/config.inc.php.
Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en setup.php de phpMyAdmin versiones anteriores a 2.11.8 permite a atacantes remotos asistidos por el usuario inyectar web script o HTML de su elección a través de argumentos de instalación manipulados. NOTA: esta cuestión sólo puede ser explotada en escenarios limitados en los cuales el atacante puede modificar config/config.inc.php.
A few vulnerabilities and security-related issues have been fixed in phpMyAdmin since the 2.11.7 release. This update provides version 2.11.9.2 which is the latest stable release of phpMyAdmin and fixes CVE-2008-3197, CVE-2008-3456, CVE-2008-3457, and CVE-2008-4096. No configuration changes should be required since the previous update (version 2.11.7). If upgrading from older versions, it may be necessary to reconfigure phpMyAdmin. The configuration file is located in /etc/phpMyAdmin/. In most cases, it should be sufficient so simply replace config.default.php with config.default.php.rpmnew and make whatever modifications are necessary.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2008-08-04 CVE Reserved
- 2008-08-04 CVE Published
- 2024-08-07 CVE Updated
- 2024-08-07 First Exploit
- 2025-05-28 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (13)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/31312 | Third Party Advisory | |
| http://secunia.com/advisories/32834 | Third Party Advisory | |
| http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-6 | X_refsource_confirm | |
| http://www.securityfocus.com/bid/30420 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2008/2226/references | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/44052 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| http://yehg.net/lab/pr0js/advisories/XSS_inPhpMyAdmin2.11.7.pdf | 2024-08-07 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | <= 2.11.7.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version " <= 2.11.7.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.0.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.0.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.0.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.0.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.0.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.0.2" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.0.3 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.0.3" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.0.4 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.0.4" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.0.5 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.0.5" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.1.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.1.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.1.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.1.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.1.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.1.2" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.10.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.10.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.10.0.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.10.0.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.10.0.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.10.0.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.10.0.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.10.0.2" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.10.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.10.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.10.01 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.10.01" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.10.1.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.10.1.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.10.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.10.2" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.10.2.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.10.2.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.10.3 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.10.3" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.10.3.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.10.3.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.0.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.0.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.1.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.1.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.1.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.1.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.1.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.1.2" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.2" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.2.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.2.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.2.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.2.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.2.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.2.2" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.3 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.3" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.3.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.3.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.4 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.4" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.4.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.4.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.5 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.5" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.5.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.5.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.5.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.5.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.5.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.5.2" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.6 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.6" | - |
Affected
| ||||||