CVE-2010-3056
Severity Score
4.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.11.x before 2.11.10.1 and 3.x before 3.3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) db_search.php, (2) db_sql.php, (3) db_structure.php, (4) js/messages.php, (5) libraries/common.lib.php, (6) libraries/database_interface.lib.php, (7) libraries/dbi/mysql.dbi.lib.php, (8) libraries/dbi/mysqli.dbi.lib.php, (9) libraries/db_info.inc.php, (10) libraries/sanitizing.lib.php, (11) libraries/sqlparser.lib.php, (12) server_databases.php, (13) server_privileges.php, (14) setup/config.php, (15) sql.php, (16) tbl_replace.php, and (17) tbl_sql.php.
Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en phpMyAdmin v2.11.x anterior a v2.11.10.1, y 3.x anterior a 3.3.5.1 permite a atacantes remotos inyectar código web o HTML de su elección a través de vectores relacionados con (1) db_search.php, (2) db_sql.php, (3) db_structure.php, (4) js/messages.php, (5) libraries/common.lib.php, (6) libraries/database_interface.lib.php, (7) libraries/dbi/mysql.dbi.lib.php, (8) libraries/dbi/mysqli.dbi.lib.php, (9) libraries/db_info.inc.php, (10) libraries/sanitizing.lib.php, (11) libraries/sqlparser.lib.php, (12) server_databases.php, (13) server_privileges.php, (14) setup/config.php, (15) sql.php, (16) tbl_replace.php, y (17) tbl_sql.php.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-08-19 CVE Reserved
- 2010-08-24 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-07 CVE Updated
- 2024-08-07 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (13)
| URL | Tag | Source |
|---|---|---|
| http://www.vupen.com/english/advisories/2010/2231 | Vdb Entry | |
| https://bugzilla.redhat.com/show_bug.cgi?id=625877 | X_refsource_confirm |
| URL | Date | SRC |
|---|---|---|
| http://yehg.net/lab/pr0js/advisories/phpmyadmin/%5Bphpmyadmin-3.3.5%5D_cross_site_scripting%28XSS%29 | 2024-08-07 |
| URL | Date | SRC |
|---|---|---|
| http://www.phpmyadmin.net/home_page/security/PMASA-2010-5.php | 2011-01-28 | |
| http://www.securityfocus.com/bid/42584 | 2011-01-28 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.1.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.1.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.1.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.1.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.1.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.1.2" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.2.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.2.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.2.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.2.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.2.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.2.2" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.3.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.3.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.4.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.4.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.5.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.5.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.5.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.5.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.5.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.5.2" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.6.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.6.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.7.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.7.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.7.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.7.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.8.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.8.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.9.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.9.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.9.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.9.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.9.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.9.2" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.9.3 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.9.3" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.9.4 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.9.4" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.9.5 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.9.5" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.9.6 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.9.6" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 2.11.10.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "2.11.10.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.0.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.0.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.0.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.0.0" | alpha |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.0.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.0.0" | beta |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.0.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.0.0" | rc1 |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.0.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.0.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.0.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.0.1" | rc1 |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.0.1.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.0.1.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.1.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.1.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.1.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.1.0" | beta1 |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.1.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.1.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.1.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.1.1" | rc1 |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.1.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.1.2" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.1.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.1.2" | rc1 |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.1.3 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.1.3" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.1.3 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.1.3" | rc1 |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.1.3.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.1.3.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.1.3.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.1.3.2" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.1.4 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.1.4" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.1.4 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.1.4" | rc2 |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.1.5 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.1.5" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.1.5 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.1.5" | rc1 |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.2.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.2.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.2.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.2.0" | beta1 |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.2.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.2.0" | rc1 |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.2.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.2.1" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.2.1 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.2.1" | rc1 |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.2.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.2.2" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.2.2 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.2.2" | rc1 |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.3.0.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.3.0.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.3.1.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.3.1.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.3.2.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.3.2.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.3.3.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.3.3.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.3.4.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.3.4.0" | - |
Affected
| ||||||
| Phpmyadmin Search vendor "Phpmyadmin" | Phpmyadmin Search vendor "Phpmyadmin" for product "Phpmyadmin" | 3.3.5.0 Search vendor "Phpmyadmin" for product "Phpmyadmin" and version "3.3.5.0" | - |
Affected
| ||||||