CVE-2009-3696
published 2009-10-16CVE-2009-3696: Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or…
PriorityP421medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
2.57%
83.5th percentile
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.
Affected
58 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | phpmyadmin | < phpmyadmin 4:3.2.2.1-1 (bookworm) | phpmyadmin 4:3.2.2.1-1 (bookworm) |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv4.3MEDIUM
vendor_debian4.3MEDIUM
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
phpMyAdmin Cross-site Scripting In MySQL Table Name
ghsa·2022-05-02
CVE-2009-3696 [MEDIUM] CWE-79 phpMyAdmin Cross-site Scripting In MySQL Table Name
phpMyAdmin Cross-site Scripting In MySQL Table Name
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.
OSV
phpMyAdmin Cross-site Scripting In MySQL Table Name
osv·2022-05-02
CVE-2009-3696 [MEDIUM] phpMyAdmin Cross-site Scripting In MySQL Table Name
phpMyAdmin Cross-site Scripting In MySQL Table Name
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.
OSV
CVE-2009-3696: Cross-site scripting (XSS) vulnerability in phpMyAdmin 2
osv·2009-10-16·CVSS 4.3
CVE-2009-3696 [MEDIUM] CVE-2009-3696: Cross-site scripting (XSS) vulnerability in phpMyAdmin 2
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.
Debian
CVE-2009-3696: phpmyadmin - Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 an...
vendor_debian·2009·CVSS 4.3
CVE-2009-3696 [MEDIUM] CVE-2009-3696: phpmyadmin - Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 an...
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.
Scope: local
bookworm: resolved (fixed in 4:3.2.2.1-1)
bullseye: resolved (fixed in 4:3.2.2.1-1)
forky: resolved (fixed in 4:3.2.2.1-1)
sid: resolved (fixed in 4:3.2.2.1-1)
trixie: resolved (fixed in 4:3.2.2.1-1)
Red Hat
phpMyAdmin: XSS and SQL injection (PMASA-2009-6)
vendor_redhat·CVSS 4.3
CVE-2009-3696 [MEDIUM] CWE-79 phpMyAdmin: XSS and SQL injection (PMASA-2009-6)
phpMyAdmin: XSS and SQL injection (PMASA-2009-6)
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.
No detection rules found.
No public exploits indexed.
http://bugs.gentoo.org/show_bug.cgi?id=288899http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.htmlhttp://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.htmlhttp://freshmeat.net/projects/phpmyadmin/releases/306667http://freshmeat.net/projects/phpmyadmin/releases/306669http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.htmlhttp://marc.info/?l=oss-security&m=125553728512853&w=2http://marc.info/?l=oss-security&m=125561979001460&w=2http://secunia.com/advisories/37016http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/http://www.mandriva.com/security/advisories?name=MDVSA-2009:274http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.phphttp://www.securityfocus.com/bid/36658http://www.vupen.com/english/advisories/2009/2899https://bugzilla.redhat.com/show_bug.cgi?id=528769https://exchange.xforce.ibmcloud.com/vulnerabilities/53742https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.htmlhttp://bugs.gentoo.org/show_bug.cgi?id=288899http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.htmlhttp://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.htmlhttp://freshmeat.net/projects/phpmyadmin/releases/306667http://freshmeat.net/projects/phpmyadmin/releases/306669http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.htmlhttp://marc.info/?l=oss-security&m=125553728512853&w=2http://marc.info/?l=oss-security&m=125561979001460&w=2http://secunia.com/advisories/37016http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/http://www.mandriva.com/security/advisories?name=MDVSA-2009:274http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.phphttp://www.securityfocus.com/bid/36658http://www.vupen.com/english/advisories/2009/2899https://bugzilla.redhat.com/show_bug.cgi?id=528769https://exchange.xforce.ibmcloud.com/vulnerabilities/53742https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.html
2009-10-16
Published