4.3
CVSSv2

CVE-2011-3181

Published: 29/08/2011 Updated: 06/11/2012
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x prior to 3.3.10.4 and 3.4.x prior to 3.4.4 allow remote malicious users to inject arbitrary web script or HTML via a (1) table name, (2) column name, or (3) index name.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

phpmyadmin phpmyadmin 3.3.3.0

phpmyadmin phpmyadmin 3.3.4.0

phpmyadmin phpmyadmin 3.3.6

phpmyadmin phpmyadmin 3.3.9.1

phpmyadmin phpmyadmin 3.3.5.1

phpmyadmin phpmyadmin 3.3.2.0

phpmyadmin phpmyadmin 3.3.9.2

phpmyadmin phpmyadmin 3.3.9.0

phpmyadmin phpmyadmin 3.3.8

phpmyadmin phpmyadmin 3.3.1.0

phpmyadmin phpmyadmin 3.3.10.0

phpmyadmin phpmyadmin 3.3.10.1

phpmyadmin phpmyadmin 3.3.8.1

phpmyadmin phpmyadmin 3.3.5.0

phpmyadmin phpmyadmin 3.3.7

phpmyadmin phpmyadmin 3.3.0.0

phpmyadmin phpmyadmin 3.3.10.2

phpmyadmin phpmyadmin 3.3.10.3

phpmyadmin phpmyadmin 3.4.3.1

phpmyadmin phpmyadmin 3.4.0.0

phpmyadmin phpmyadmin 3.4.3.0

phpmyadmin phpmyadmin 3.4.1.0

phpmyadmin phpmyadmin 3.4.2.0

phpmyadmin phpmyadmin 3.4.3.2

Vendor Advisories

Debian Bug report logs - #656247 phpmyadmin: Local File Inclusion via XXE-injection (CVE-2011-4107) Package: phpmyadmin; Maintainer for phpmyadmin is Thijs Kinkhorst <thijs@debianorg>; Source for phpmyadmin is src:phpmyadmin (PTS, buildd, popcon) Reported by: Henri Salo <henri@nervfi> Date: Tue, 17 Jan 2012 19:21:0 ...
Several vulnerabilities have been discovered in phpMyAdmin, a tool to administer MySQL over the web The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2011-4107 The XML import plugin allowed a remote attacker to read arbitrary files via XML data containing external entity references CVE-2011-1940, CVE-201 ...