FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2010-4329

This CVE name corresponds to:

Entered	Topic
2010-11-30	phpMyAdmin -- XSS attack in database search

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2010-4329 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2010-4329
Phase	Assigned(20101129)

Description

Cross-site scripting (XSS) vulnerability in the PMA_linkOrButton function in libraries/common.lib.php in the database (db) search script in phpMyAdmin 2.11.x before 2.11.11.1 and 3.x before 3.3.8.1 allows remote attackers to inject arbitrary web script or HTML via a crafted request.

References

Source	Reference
CONFIRM	http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commitdiff;h=4341818d73d454451f024950a4ce0141608ac7f8
CONFIRM	http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commitdiff;h=e1f4901ffc400b6d2df15eac0ba5015fe48a27c4
CONFIRM	http://www.phpmyadmin.net/home_page/security/PMASA-2010-8.php
DEBIAN	DSA-2139
FEDORA	FEDORA-2010-18343
FEDORA	FEDORA-2010-18371
MANDRIVA	MDVSA-2010:244
BID	45100
OSVDB	69516
SECUNIA	42408
SECUNIA	42477
SECUNIA	42725
VUPEN	ADV-2010-3082
VUPEN	ADV-2010-3087
VUPEN	ADV-2010-3158
VUPEN	ADV-2011-0001