CVE-2011-4780 — Cross-site Scripting in Phpmyadmin

CWE-79 — Cross-site Scripting5 documents5 sources
Severity
4.3MEDIUMNVD
EPSS
0.5%
top 35.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
PhpmyadminDebian Phpmyadmin
Timeline
PublishedDec 22
Latest updateMay 17

Description

Multiple cross-site scripting (XSS) vulnerabilities in libraries/display_export.lib.php in phpMyAdmin 3.4.x before 3.4.9 allow remote attackers to inject arbitrary web script or HTML via crafted URL parameters, related to the export panels in the (1) server, (2) database, and (3) table sections.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages3 packages

▶debiandebian/phpmyadmin< phpmyadmin 4:3.4.9-1 (bookworm)
▶Debianphpmyadmin/phpmyadmin< 4:3.4.9-1+3
▶NVDphpmyadmin/phpmyadmin11 versions+10

Patches

Patch: www.phpmyadmin.net ↗Patch: www.phpmyadmin.net ↗

🔴Vulnerability Details

2
GHSA
GHSA-c5vr-rrqf-4hf2: Multiple cross-site scripting (XSS) vulnerabilities in libraries/display_export↗2022-05-17
▶
OSV
CVE-2011-4780: Multiple cross-site scripting (XSS) vulnerabilities in libraries/display_export↗2011-12-22
▶

📋Vendor Advisories

1
Debian
CVE-2011-4780: phpmyadmin - Multiple cross-site scripting (XSS) vulnerabilities in libraries/display_export....↗2011
▶

💬Community

1
Bugzilla
CVE-2011-4780 phpMyAdmin XSS on the export panels in the server, database and table sections PMASA-2011-20↗2011-12-22
▶