CVE-2010-2958 — Cross-site Scripting in Phpmyadmin

CWE-79 — Cross-site Scripting5 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.4%
top 36.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
PhpmyadminDebian Phpmyadmin
Timeline
PublishedSep 8
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in libraries/Error.class.php in phpMyAdmin 3.x before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to a PHP backtrace and error messages (aka debugging messages), a different vulnerability than CVE-2010-3056.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages4 packages

▶debiandebian/phpmyadmin< phpmyadmin 4:3.3.6-1 (bookworm)
▶Packagistphpmyadmin/phpmyadmin3.0.0 — 3.3.6
▶Debianphpmyadmin/phpmyadmin< 4:3.3.6-1+3
▶NVDphpmyadmin/phpmyadmin21 versions+20

Patches

Patch: www.phpmyadmin.net ↗Patch: www.vupen.com ↗Patch: www.phpmyadmin.net ↗

🔴Vulnerability Details

3
GHSA
phpMyAdmin Cross-site Scripting vulnerability↗2022-05-17
▶
OSV
phpMyAdmin Cross-site Scripting vulnerability↗2022-05-17
▶
OSV
CVE-2010-2958: Cross-site scripting (XSS) vulnerability in libraries/Error↗2010-09-08
▶

📋Vendor Advisories

1
Debian
CVE-2010-2958: phpmyadmin - Cross-site scripting (XSS) vulnerability in libraries/Error.class.php in phpMyAd...↗2010
▶