Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.801660
Kategorie:Web application abuses
Titel:phpMyAdmin 'error.php' Cross Site Scripting Vulnerability
Zusammenfassung:The host is running phpMyAdmin and is prone to Cross-Site;Scripting Vulnerability.
Beschreibung:Summary:
The host is running phpMyAdmin and is prone to Cross-Site
Scripting Vulnerability.

Vulnerability Insight:
The flaw is caused by input validation errors in the 'error.php'
script when processing crafted BBcode tags containing '@' characters, which
could allow attackers to inject arbitrary HTML code within the error page
and conduct phishing attacks.

Vulnerability Impact:
Successful exploitation will allow attackers to inject arbitrary
HTML code within the error page and conduct phishing attacks.

Affected Software/OS:
phpMyAdmin version 3.3.8.1 and prior.

Solution:
No known solution was made available for at least one year since the disclosure
of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer
release, disable respective features, remove the product or replace the product by another one.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2010-4480
BugTraq ID: 45633
http://www.securityfocus.com/bid/45633
Debian Security Information: DSA-2139 (Google Search)
http://www.debian.org/security/2010/dsa-2139
http://www.exploit-db.com/exploits/15699
http://www.mandriva.com/security/advisories?name=MDVSA-2011:000
http://secunia.com/advisories/42485
http://secunia.com/advisories/42725
http://www.vupen.com/english/advisories/2010/3133
http://www.vupen.com/english/advisories/2011/0001
http://www.vupen.com/english/advisories/2011/0027
CopyrightCopyright (C) 2010 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.