Búsqueda de    
Vulnerabilidad   
    Buscar 219043 Descripciones CVE y
99761 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.801660
Categoría:Web application abuses
Título:phpMyAdmin 'error.php' Cross Site Scripting Vulnerability
Resumen:The host is running phpMyAdmin and is prone to Cross-Site;Scripting Vulnerability.
Descripción:Summary:
The host is running phpMyAdmin and is prone to Cross-Site
Scripting Vulnerability.

Vulnerability Insight:
The flaw is caused by input validation errors in the 'error.php'
script when processing crafted BBcode tags containing '@' characters, which
could allow attackers to inject arbitrary HTML code within the error page
and conduct phishing attacks.

Vulnerability Impact:
Successful exploitation will allow attackers to inject arbitrary
HTML code within the error page and conduct phishing attacks.

Affected Software/OS:
phpMyAdmin version 3.3.8.1 and prior.

Solution:
No known solution was made available for at least one year since the disclosure
of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer
release, disable respective features, remove the product or replace the product by another one.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2010-4480
BugTraq ID: 45633
http://www.securityfocus.com/bid/45633
Debian Security Information: DSA-2139 (Google Search)
http://www.debian.org/security/2010/dsa-2139
http://www.exploit-db.com/exploits/15699
http://www.mandriva.com/security/advisories?name=MDVSA-2011:000
http://secunia.com/advisories/42485
http://secunia.com/advisories/42725
http://www.vupen.com/english/advisories/2010/3133
http://www.vupen.com/english/advisories/2011/0001
http://www.vupen.com/english/advisories/2011/0027
CopyrightCopyright (C) 2010 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2024 E-Soft Inc. Todos los derechos reservados.