Detections
Analytics

phpMyAdmin 3.x < 3.3.6 XSS

medium Nessus Network Monitor Plugin ID 5652

Synopsis

The remote web server contains a PHP application that is vulnerable to a cross-site scripting attack.

Description

Versions of phpMyAdmin earlier than 3.3.6 are potentially affected by a cross-site scripting vulnerability via error messages in PHP backtrace.

Solution

Upgrade to phpMyAdmin 3.3.6 or later.

See Also

http://www.phpmyadmin.net/home_page/security/PMASA-2010-6.php

Plugin Details

Severity: Medium

ID: 5652

Family: CGI

Published: 8/31/2010

Updated: 3/6/2019

Vulnerability Information

CPE: cpe:/a:phpmyadmin:phpmyadmin

Patch Publication Date: 8/30/2010

Vulnerability Publication Date: 8/30/2010

Reference Information

BID: 42874