National Cyber Awareness System

Vulnerability Summary for CVE-2009-3696

Overview

Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2009-2899

Type: Advisory; Patch Information

Hyperlink:http://www.vupen.com/english/advisories/2009/2899

External Source: CONFIRM

Name: http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php

Type: Advisory; Patch Information

Hyperlink:http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php

External Source: FEDORA

Name: FEDORA-2009-10530

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.html

External Source: FEDORA

Name: FEDORA-2009-10510

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=528769

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=528769

External Source: XF

Name: phpmyadmin-tablename-xss(53742)

Hyperlink:http://xforce.iss.net/xforce/xfdb/53742

External Source: BID

Name: 36658

Hyperlink:http://www.securityfocus.com/bid/36658

External Source: MANDRIVA

Name: MDVSA-2009:274

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:274

External Source: CONFIRM

Name: http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/

Hyperlink:http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/

External Source: CONFIRM

Name: http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/

Hyperlink:http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/

External Source: SECUNIA

Name: 37016

Type: Advisory

Hyperlink:http://secunia.com/advisories/37016

External Source: MLIST

Name: [oss-security] 20091015 Re: CVE Request -- phpMyAdmin

Hyperlink:http://marc.info/?l=oss-security&m=125561979001460&w=2

External Source: MLIST

Name: [oss-security] 20091014 CVE Request -- phpMyAdmin

Hyperlink:http://marc.info/?l=oss-security&m=125553728512853&w=2

External Source: SUSE

Name: SUSE-SR:2009:017

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html

External Source: CONFIRM

Name: http://freshmeat.net/projects/phpmyadmin/releases/306669

Hyperlink:http://freshmeat.net/projects/phpmyadmin/releases/306669

External Source: CONFIRM

Name: http://freshmeat.net/projects/phpmyadmin/releases/306667

Hyperlink:http://freshmeat.net/projects/phpmyadmin/releases/306667

External Source: CONFIRM

Name: http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.html

Hyperlink:http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.html

External Source: CONFIRM

Name: http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.html

Hyperlink:http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.html

External Source: CONFIRM

Name: http://bugs.gentoo.org/show_bug.cgi?id=288899

Hyperlink:http://bugs.gentoo.org/show_bug.cgi?id=288899