CVE-2012-1600

Phppgadmin < 5.0.3 - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) type of a function.

References (13)

[Mailing List] http://lists.opensuse.org/opensuse-updates/2012-04/msg00033.html

[Vendor Advisory] http://secunia.com/advisories/48574

[Product] http://sourceforge.net/p/phppgadmin/mailman/message/28783470/

[Third Party Advisory, VDB Entry] http://www.osvdb.org/80870

[Various Sources] http://www.postgresql.org/message-id/4F6B447C.6080204%40dalibo.com

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/52761

[Issue Tracking] https://bugzilla.redhat.com/show_bug.cgi?id=808439

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/74440

[Patch] https://github.com/phppgadmin/phppgadmin/commit/74174ad639664b52cc1609ede0af8bc403e98a00

[Patch] https://github.com/phppgadmin/phppgadmin/commit/e92a003624609a445c4cf57c9c3d1fcef0eae47c#diff-0

[Mailing List] http://www.openwall.com/lists/oss-security/2012/03/28/11

[Mailing List] http://www.openwall.com/lists/oss-security/2012/03/29/6

[Mailing List] http://www.openwall.com/lists/oss-security/2012/03/30/7

Scores

EPSS 0.0055

EPSS Percentile 67.8%

Details

CWE

CWE-79

Status published

Products (7)

phppgadmin_project/phppgadmin < 5.0.3

phppgadmin_project/phppgadmin

opensuse/opensuse

n/a/n/a

Published May 14, 2014

Tracked Since Feb 18, 2026