CVE-2011-2642

phpMyAdmin < 3.3.10.3 and 3.4.x < 3.4.3.2 - Authenticated Cross-Site Scripting via Table Name

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in the table Print view implementation in tbl_printview.php in phpMyAdmin before 3.3.10.3 and 3.4.x before 3.4.3.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name.

References (13)

Core 13
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/45515
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/45365
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/48874
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2011:124
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2286
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063410.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063418.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/45315
Patch, Vendor Advisory x_refsource_confirm
http://www.phpmyadmin.net/home_page/security/PMASA-2011-9.php
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/68750

Scores

EPSS 0.0067
EPSS Percentile 71.5%

Details

CWE
CWE-79
Status published
Products (38)
phpmyadmin/phpmyadmin 2.11.0
phpmyadmin/phpmyadmin 2.11.1.0
phpmyadmin/phpmyadmin 2.11.1.1
phpmyadmin/phpmyadmin 2.11.1.2
phpmyadmin/phpmyadmin 2.11.2.0
phpmyadmin/phpmyadmin 2.11.2.1
phpmyadmin/phpmyadmin 2.11.2.2
phpmyadmin/phpmyadmin 2.11.3.0
phpmyadmin/phpmyadmin 2.11.4.0
phpmyadmin/phpmyadmin 2.11.5.0
... and 28 more
Published Aug 01, 2011
Tracked Since Feb 18, 2026