CVE-2011-4782: XSS
Published Dec 22, 2011
·Updated
Cross-site scripting (XSS) vulnerability in libraries/config/ConfigFile.class.php in the setup interface in phpMyAdmin 3.4.x before 3.4.9 allows remote attackers to inject arbitrary web script or HTML via the host parameter.
Affected Software
12 affected componentsFixes available
phpMyAdmin phpMyAdmin=3.4.5.0
phpMyAdmin phpMyAdmin=3.4.0.0
phpMyAdmin phpMyAdmin=3.4.3.1
phpMyAdmin phpMyAdmin=3.4.6.0
phpMyAdmin phpMyAdmin=3.4.4.0
phpMyAdmin phpMyAdmin=3.4.1.0
phpMyAdmin phpMyAdmin=3.4.2.0
phpMyAdmin phpMyAdmin=3.4.8.0
phpMyAdmin phpMyAdmin=3.4.3.0
phpMyAdmin phpMyAdmin=3.4.7.0
phpMyAdmin phpMyAdmin=3.4.3.2
composer/phpmyadmin/phpmyadmin>=3.4.0<3.4.9
3.4.9
Remediation
Event History
Dec 22, 2011
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
May 17, 2022
Advisory Published
via GitHub·01:51 AM
Frequently Asked Questions
1
What is the severity of CVE-2011-4782?
CVE-2011-4782 has a moderate severity level due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2011-4782?
To fix CVE-2011-4782, upgrade phpMyAdmin to version 3.4.9 or later.
3
What versions of phpMyAdmin are affected by CVE-2011-4782?
CVE-2011-4782 affects phpMyAdmin versions 3.4.0.0 to 3.4.8.0.
4
What type of attack does CVE-2011-4782 allow?
CVE-2011-4782 allows remote attackers to perform cross-site scripting (XSS) attacks.
5
What is the impact of CVE-2011-4782 on users?
The impact of CVE-2011-4782 is that it can inject arbitrary web scripts or HTML into the phpMyAdmin setup interface.