4.3
CVSSv2

CVE-2011-3598

Published: 08/10/2011 Updated: 16/05/2014
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in phpPgAdmin prior to 5.0.3 allow remote malicious users to inject arbitrary web script or HTML via (1) a web page title, related to classes/Misc.php; or the (2) return_url or (3) return_desc parameter to display.php.

Vulnerable Product Search on Vulmon Subscribe to Product

phppgadmin phppgadmin 3.5.2

phppgadmin phppgadmin 3.2

phppgadmin phppgadmin 4.2.1

phppgadmin phppgadmin 3.1

phppgadmin phppgadmin

phppgadmin phppgadmin 3.5.3

phppgadmin phppgadmin 3.4.1

phppgadmin phppgadmin 4.2.2

phppgadmin phppgadmin 4.2.3

phppgadmin phppgadmin 3.5

phppgadmin phppgadmin 4.1.1

phppgadmin phppgadmin 2.2.1

phppgadmin phppgadmin 2.2

phppgadmin phppgadmin 3.4

phppgadmin phppgadmin 3.3

phppgadmin phppgadmin 5.0.0

phppgadmin phppgadmin 5.0.1

Vendor Advisories

Debian Bug report logs - #644290 phppgadmin multiple XSS (CVE-2011-3598) Package: phppgadmin; Maintainer for phppgadmin is Debian PostgreSQL Maintainers <team+postgresql@trackerdebianorg>; Source for phppgadmin is src:phppgadmin (PTS, buildd, popcon) Reported by: "Thijs Kinkhorst" <thijs@debianorg> Date: Tue, 4 O ...