CVE-2012-1600 Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) type of a function...
MediumCVSS 4.3
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) type of a function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/phppgadmin(Debian:13) | < 5.0.4-1 | 5.0.4-1 |
| debian/phppgadmin(Debian:14) | < 5.0.4-1 | 5.0.4-1 |
| phppgadmin project phppgadmin | <= 5.0.3 | No fix listed |
| phppgadmin project phppgadmin | = 5.0 | No fix listed |
| phppgadmin project phppgadmin | = 5.0.1 | No fix listed |
| phppgadmin project phppgadmin | = 5.0.2 | No fix listed |
| opensuse | = 11.4 | No fix listed |
| opensuse | = 12.1 | No fix listed |
References
- Debian Security Tracker CVE-2012-1600 vendor-advisory
- openSUSE-SU-2012:0493 vendor-advisory
- 48574 third-party-advisory vendor-advisory
- sourceforge.net
- [oss-security] 20120328 CVE request: phppgadmin before 5.0.4 XSS mailing-list
- [oss-security] 20120328 Re: CVE request: phppgadmin before 5.0.4 XSS mailing-list
- [oss-security] 20120330 Re: CVE request: phppgadmin before 5.0.4 XSS mailing-list
- 80870 vdb-entry
- www.postgresql.org
- 52761 vdb-entry
- bugzilla.redhat.com
- phppgadmin-function-xss(74440) vdb-entry
- github.com
- github.com