CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-4782

Cross-site scripting (XSS) vulnerability in libraries/config/ConfigFile.class.php in the setup interface in phpMyAdmin 3.4.x before 3.4.9 allows remote attackers to inject arbitrary web script or HTML via the host parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 63.9%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2011-4782

Phpmyadmin » Phpmyadmin » Version: 3.4.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.0.0
Phpmyadmin » Phpmyadmin » Version: 3.4.1.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.1.0
Phpmyadmin » Phpmyadmin » Version: 3.4.2.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.2.0
Phpmyadmin » Phpmyadmin » Version: 3.4.3.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.3.0
Phpmyadmin » Phpmyadmin » Version: 3.4.3.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.3.1
Phpmyadmin » Phpmyadmin » Version: 3.4.3.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.3.2
Phpmyadmin » Phpmyadmin » Version: 3.4.4.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.4.0
Phpmyadmin » Phpmyadmin » Version: 3.4.5.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.5.0
Phpmyadmin » Phpmyadmin » Version: 3.4.6.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.6.0
Phpmyadmin » Phpmyadmin » Version: 3.4.7.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.7.0
Phpmyadmin » Phpmyadmin » Version: 3.4.8.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.8.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-4782

Products

Pricing

Contact Us