CVE-2008-2960: XSS
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.11.7, when registerglobals is enabled and .htaccess support is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving scripts in libraries/.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2960?
The severity of CVE-2008-2960 is classified as medium due to its potential for exploiting cross-site scripting.
How do I fix CVE-2008-2960?
To fix CVE-2008-2960, users should upgrade phpMyAdmin to version 2.11.7 or later.
What platforms are affected by CVE-2008-2960?
CVE-2008-2960 affects various versions of phpMyAdmin before 2.11.7, specifically with register_globals enabled.
Can CVE-2008-2960 be exploited remotely?
Yes, CVE-2008-2960 can be exploited remotely through injected scripts if the vulnerability is present.
What are the implications of CVE-2008-2960?
The implications of CVE-2008-2960 include potential unauthorized data manipulation and exposure of sensitive user information.