Description

Cross-site scripting (XSS) vulnerability in libraries/Error.class.php in phpMyAdmin 3.x before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to a PHP backtrace and error messages (aka debugging messages), a different vulnerability than CVE-2010-3056.

Remediation

References

CVE-2010-2958

Related Vulnerabilities

Jboss EAP Incorrect Authorization Vulnerability (CVE-2019-14843)

WordPress Plugin YITH Color and Label Variations for WooCommerce Security Bypass (1.8.11)

phpMyAdmin Improper Input Validation Vulnerability (CVE-2011-2719)

phpMyAdmin Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2016-6631)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4293)

Severity

Medium

Classification

CVE-2010-2958 CWE-707

Tags

Missing Update Known Vulnerabilities