Test ID:	1.3.6.1.4.1.25623.1.0.103295
Category:	Web application abuses
Title:	phpPgAdmin Multiple XSS Vulnerabilities
Summary:	phpPgAdmin is prone to multiple cross-site scripting (XSS); vulnerabilities because it fails to properly sanitize user-supplied input.
Description:	Summary: phpPgAdmin is prone to multiple cross-site scripting (XSS) vulnerabilities because it fails to properly sanitize user-supplied input. Vulnerability Impact: An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. Affected Software/OS: phpPgAdmin version 5.0.2 and probably prior. Solution: Vendor updates are available. Please see the references for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3598 46248 http://secunia.com/advisories/46248 46426 http://secunia.com/advisories/46426 49914 http://www.securityfocus.com/bid/49914 75997 http://osvdb.org/75997 75998 http://osvdb.org/75998 FEDORA-2011-13748 http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068009.html FEDORA-2011-13801 http://lists.fedoraproject.org/pipermail/package-announce/2011-October/067846.html FEDORA-2011-13805 http://lists.fedoraproject.org/pipermail/package-announce/2011-October/067843.html [oss-security] 20111004 CVE Request -- phpPgAdmin -- Multiple XSS flaws fixed in v5.0.3 http://www.openwall.com/lists/oss-security/2011/10/04/1 [oss-security] 20111004 Re: CVE Request -- phpPgAdmin -- Multiple XSS flaws fixed in v5.0.3 http://www.openwall.com/lists/oss-security/2011/10/04/10 [phppgadmin-news] 20111003 [ppa-news] phpPgAdmin 5.0.3 released http://sourceforge.net/mailarchive/forum.php?thread_name=4E897F6C.90905%40free.fr&forum_name=phppgadmin-news http://freshmeat.net/projects/phppgadmin/releases/336969 https://bugs.gentoo.org/show_bug.cgi?id=385505 https://bugzilla.redhat.com/show_bug.cgi?id=743205 https://github.com/phppgadmin/phppgadmin/commit/1df248203de055f97e092b50b1dd9643ccb73842 openSUSE-SU-2012:0493 http://lists.opensuse.org/opensuse-updates/2012-04/msg00033.html
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.