Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2011-3598

Good to know:

icon

Date: October 7, 2011

Multiple cross-site scripting (XSS) vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) a web page title, related to classes/Misc.php; or the (2) return_url or (3) return_desc parameter to display.php.

Language: PHP

Severity Score

Related Resources (19)

http://osvdb.org/75997
http://lists.fedoraproject.org/pipermail/package-announce/2011-October/067843.html
http://osvdb.org/75998
http://lists.fedoraproject.org/pipermail/package-announce/2011-October/067846.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068009.html
http://www.openwall.com/lists/oss-security/2011/10/04/10
https://bugzilla.redhat.com/show_bug.cgi?id=743205
https://bugs.gentoo.org/show_bug.cgi?id=385505
https://github.com/phppgadmin/phppgadmin/commit/1df248203de055f97e092b50b1dd9643ccb73842
http://www.securityfocus.com/bid/49914
http://lists.opensuse.org/opensuse-updates/2012-04/msg00033.html
http://www.openwall.com/lists/oss-security/2011/10/04/1
http://sourceforge.net/mailarchive/forum.php?thread_name=4E897F6C.90905%40free.fr&forum_name=phppgadmin-news
http://freshmeat.net/projects/phppgadmin/releases/336969
https://security-tracker.debian.org/tracker/CVE-2011-3598
https://nvd.nist.gov/vuln/detail/CVE-2011-3598
http://secunia.com/advisories/46426
http://secunia.com/advisories/46248
https://www.mend.io/vulnerability-database/CVE-2011-3598

Severity Score

Weakness Type (CWE)

Cross-Site Scripting (XSS)

CWE-79

Top Fix

icon

Upgrade Version

Upgrade to version REL_5-0-3

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): PARTIAL
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us