medium4.3
CVE-2009-2284
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark.
Impact
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmyadmin | Phpmyadmin | through 3.2.0 Versions 2.0, 2.0.0, 2.0.1, 2.0.2, 2.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/35649
- http://secunia.com/advisories/35715
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:192
- http://www.phpmyadmin.net/home_page/security/PMASA-2009-5.php
- https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00150.html
- https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00152.html
- https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00256.html
- http://secunia.com/advisories/35649
- http://secunia.com/advisories/35715
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:192
- http://www.phpmyadmin.net/home_page/security/PMASA-2009-5.php
- https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00150.html
- https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00152.html
- https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00256.html