Description

error.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted BBcode tag containing "@" characters, as demonstrated using "[a@url@page]".

Remediation

References

CVE-2010-4480

Related Vulnerabilities

WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60207)

Plone CMS CVE-2017-1000483 Vulnerability (CVE-2017-1000483)

Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-4194)

Liferay DXP Improper Certificate Validation Vulnerability (CVE-2022-42131)

MySQL CVE-2023-21877 Vulnerability (CVE-2023-21877)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2010-4480