Cross-site scripting (XSS) vulnerability in libraries/Error.class.php in phpMyAdmin 3.x before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to a PHP backtrace and error messages (aka debugging messages), a different vulnerability than CVE-2010-3056.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Cross-site scripting (XSS) vulnerability in libraries/Error.class.php in phpMyAdmin 3.x before 3.3.6
    allows remote attackers to inject arbitrary web script or HTML via vectors related to a PHP backtrace and
    error messages (aka debugging messages), a different vulnerability than CVE-2010-3056. (CVE-2010-2958)

The remote host is affected by the vulnerability described in GLSA-201201-01 (phpMyAdmin: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in phpMyAdmin. Please       review the CVE identifiers and phpMyAdmin Security Advisories referenced       below for details.
  Impact :

    Remote attackers might be able to insert and execute PHP code, include       and execute local PHP files, or perform Cross-Site Scripting (XSS)       attacks via various vectors.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
434985	SCA: security update for phpmyadmin/phpmyadmin (GHSA-frv8-xjcp-hrm2)	Tenable Cloud Security	SCA Checks	medium
434985	SCA: security update for phpmyadmin/phpmyadmin (GHSA-frv8-xjcp-hrm2)	Tenable Self-Hosted Container Security	SCA Checks	medium
57433	GLSA-201201-01 : phpMyAdmin: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical

Detections

Analytics

CVE-2010-2958

medium

Tenable Plugins

medium

medium

critical