CVE-2010-4329: XSS
Cross-site scripting (XSS) vulnerability in the PMAlinkOrButton function in libraries/common.lib.php in the database (db) search script in phpMyAdmin 2.11.x before 2.11.11.1 and 3.x before 3.3.8.1 allows remote attackers to inject arbitrary web script or HTML via a crafted request.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4329?
CVE-2010-4329 is classified as a high-severity cross-site scripting (XSS) vulnerability.
How do I fix CVE-2010-4329?
To fix CVE-2010-4329, update your phpMyAdmin to version 2.11.11.1 or later for the 2.11.x series, or version 3.3.8.1 or later for the 3.x series.
What type of attack can CVE-2010-4329 facilitate?
CVE-2010-4329 allows remote attackers to inject arbitrary web scripts or HTML into the phpMyAdmin interface.
Which versions of phpMyAdmin are affected by CVE-2010-4329?
CVE-2010-4329 affects phpMyAdmin versions 2.11.x before 2.11.11.1 and 3.x before 3.3.8.1.
Can CVE-2010-4329 be exploited without user interaction?
Yes, CVE-2010-4329 can be exploited remotely, often without user interaction, through crafted requests.