CVE-2011-2642

Executive Summary

Informations
Name	CVE-2011-2642	First vendor Publication	2011-08-01
Vendor	Cve	Last vendor Modification	2011-10-25

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:H/Au:N/C:N/I:P/A:N)
Cvss Base Score	2.6	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	High
Cvss Expoit Score	4.9	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Multiple cross-site scripting (XSS) vulnerabilities in the table Print view implementation in tbl_printview.php in phpMyAdmin before 3.3.10.3 and 3.4.x before 3.4.3.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2642

CWE : Common Weakness Enumeration

id	Name
CWE-79	Failure to Preserve Web Page Structure ('Cross-site Scripting')

CPE : Common Platform Enumeration

Type	Description	Count
Application	Phpmyadmin Phpmyadmin cpe:/a:phpmyadmin:phpmyadmin:3.4.3.1 cpe:/a:phpmyadmin:phpmyadmin:3.4.3.0 cpe:/a:phpmyadmin:phpmyadmin:3.4.2.0 cpe:/a:phpmyadmin:phpmyadmin:3.4.1.0 cpe:/a:phpmyadmin:phpmyadmin:3.4.0.0 cpe:/a:phpmyadmin:phpmyadmin:3.3.9.2 cpe:/a:phpmyadmin:phpmyadmin:3.3.9.1 cpe:/a:phpmyadmin:phpmyadmin:3.3.9.0 cpe:/a:phpmyadmin:phpmyadmin:3.3.8.1 cpe:/a:phpmyadmin:phpmyadmin:3.3.8 cpe:/a:phpmyadmin:phpmyadmin:3.3.7 cpe:/a:phpmyadmin:phpmyadmin:3.3.6 cpe:/a:phpmyadmin:phpmyadmin:3.3.5.1 cpe:/a:phpmyadmin:phpmyadmin:3.3.5.0 cpe:/a:phpmyadmin:phpmyadmin:3.3.4.0 cpe:/a:phpmyadmin:phpmyadmin:3.3.3.0 cpe:/a:phpmyadmin:phpmyadmin:3.3.2.0 cpe:/a:phpmyadmin:phpmyadmin:3.3.10.2 cpe:/a:phpmyadmin:phpmyadmin:3.3.10.1 cpe:/a:phpmyadmin:phpmyadmin:3.3.10.0 cpe:/a:phpmyadmin:phpmyadmin:3.3.1.0 cpe:/a:phpmyadmin:phpmyadmin:3.3.0.0 cpe:/a:phpmyadmin:phpmyadmin:3.2.2:rc1 cpe:/a:phpmyadmin:phpmyadmin:3.2.2 cpe:/a:phpmyadmin:phpmyadmin:3.2.1:rc1 cpe:/a:phpmyadmin:phpmyadmin:3.2.1 cpe:/a:phpmyadmin:phpmyadmin:3.2.0 cpe:/a:phpmyadmin:phpmyadmin:3.2.0:rc1 cpe:/a:phpmyadmin:phpmyadmin:3.2.0:beta1 cpe:/a:phpmyadmin:phpmyadmin:3.1.5 cpe:/a:phpmyadmin:phpmyadmin:3.1.5:rc1 cpe:/a:phpmyadmin:phpmyadmin:3.1.4:rc2 cpe:/a:phpmyadmin:phpmyadmin:3.1.4 cpe:/a:phpmyadmin:phpmyadmin:3.1.3.2 cpe:/a:phpmyadmin:phpmyadmin:3.1.3.1 cpe:/a:phpmyadmin:phpmyadmin:3.1.3 cpe:/a:phpmyadmin:phpmyadmin:3.1.3:rc1 cpe:/a:phpmyadmin:phpmyadmin:3.1.2:rc1 cpe:/a:phpmyadmin:phpmyadmin:3.1.2 cpe:/a:phpmyadmin:phpmyadmin:3.1.1:rc1 cpe:/a:phpmyadmin:phpmyadmin:3.1.1 cpe:/a:phpmyadmin:phpmyadmin:3.1.0:beta1 cpe:/a:phpmyadmin:phpmyadmin:3.1.0 cpe:/a:phpmyadmin:phpmyadmin:3.0.1.1 cpe:/a:phpmyadmin:phpmyadmin:3.0.1 cpe:/a:phpmyadmin:phpmyadmin:3.0.1:rc1 cpe:/a:phpmyadmin:phpmyadmin:3.0.0:beta cpe:/a:phpmyadmin:phpmyadmin:3.0.0:rc1 cpe:/a:phpmyadmin:phpmyadmin:3.0.0 cpe:/a:phpmyadmin:phpmyadmin:3.0.0:alpha cpe:/a:phpmyadmin:phpmyadmin:2.11.9.6 cpe:/a:phpmyadmin:phpmyadmin:2.11.9.5 cpe:/a:phpmyadmin:phpmyadmin:2.11.9.4 cpe:/a:phpmyadmin:phpmyadmin:2.11.9.3 cpe:/a:phpmyadmin:phpmyadmin:2.11.9.2 cpe:/a:phpmyadmin:phpmyadmin:2.11.9.1 cpe:/a:phpmyadmin:phpmyadmin:2.11.9.0 cpe:/a:phpmyadmin:phpmyadmin:2.11.8.0 cpe:/a:phpmyadmin:phpmyadmin:2.11.7.1 cpe:/a:phpmyadmin:phpmyadmin:2.11.7.0 cpe:/a:phpmyadmin:phpmyadmin:2.11.6.0 cpe:/a:phpmyadmin:phpmyadmin:2.11.5.2 cpe:/a:phpmyadmin:phpmyadmin:2.11.5.1 cpe:/a:phpmyadmin:phpmyadmin:2.11.5.0 cpe:/a:phpmyadmin:phpmyadmin:2.11.4.0 cpe:/a:phpmyadmin:phpmyadmin:2.11.3.0 cpe:/a:phpmyadmin:phpmyadmin:2.11.2.2 cpe:/a:phpmyadmin:phpmyadmin:2.11.2.1 cpe:/a:phpmyadmin:phpmyadmin:2.11.2.0 cpe:/a:phpmyadmin:phpmyadmin:2.11.10.1 cpe:/a:phpmyadmin:phpmyadmin:2.11.10.0 cpe:/a:phpmyadmin:phpmyadmin:2.11.1.2 cpe:/a:phpmyadmin:phpmyadmin:2.11.1.1 cpe:/a:phpmyadmin:phpmyadmin:2.11.1.0 cpe:/a:phpmyadmin:phpmyadmin:2.11.0	75

Open Source Vulnerability Database (OSVDB)

id	Description
74109	phpMyAdmin Table Print View Table Name Parameter XSS

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/48874
CONFIRM	http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;... http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;... http://www.phpmyadmin.net/home_page/security/PMASA-2011-9.php https://bugzilla.redhat.com/show_bug.cgi?id=725381
DEBIAN	http://www.debian.org/security/2011/dsa-2286
FEDORA	http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063410.... http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063418....
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2011:124
SECUNIA	http://secunia.com/advisories/45315 http://secunia.com/advisories/45365 http://secunia.com/advisories/45515
XF	http://xforce.iss.net/xforce/xfdb/68750

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-05-10 23:03:34	Multiple Updates

Type	Count
CPE ID(s)	75
osvdb(s)	1

Related	Severity
GLSA-201201-01	(Critical)
MDVSA-2011:124	(High)
DSA-2286	(High)

Same Subject	Severity
Login to view 21 more Alert(s)

CVE-2011-2642

Executive Summary

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

CPE : Common Platform Enumeration

Open Source Vulnerability Database (OSVDB)

Internal Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU