CVE-2010-4480
phpMyAdmin < 3.4.0-beta1 - Cross-Site Scripting via BBcode Tag
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-4480. PoCs published by emgent white_sheep & scox.
AI-analyzed exploit summary This exploit demonstrates a client-side code injection and redirect vulnerability in phpMyAdmin's error.php. It leverages BBCode-like tags to inject malicious links, redirecting users to arbitrary URLs.
Description
error.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted BBcode tag containing "@" characters, as demonstrated using "[a@url@page]".
Exploits (1)
This exploit demonstrates a client-side code injection and redirect vulnerability in phpMyAdmin's error.php. It leverages BBCode-like tags to inject malicious links, redirecting users to arbitrary URLs.