CVE-2011-1940

Published: Jan 26, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1 allow remote attackers to inject arbitrary web script or HTML via a crafted table name that triggers improper HTML rendering on a Tracking page, related to (1) libraries/tbl_links.inc.php and (2) tbl_tracking.php.

Affected (16)

Products: Phpmyadmin: Phpmyadmin

Phpmyadmin

1 product

Phpmyadmin

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 3.3.0.0
Phpmyadmin Phpmyadmin	Version 3.3.1.0
Phpmyadmin Phpmyadmin	Version 3.3.10.0
Phpmyadmin Phpmyadmin	Version 3.3.2.0
Phpmyadmin Phpmyadmin	Version 3.3.3.0
Phpmyadmin Phpmyadmin	Version 3.3.4.0
Phpmyadmin Phpmyadmin	Version 3.3.5.0
Phpmyadmin Phpmyadmin	Version 3.3.5.1
Phpmyadmin Phpmyadmin	Version 3.3.6
Phpmyadmin Phpmyadmin	Version 3.3.7
Phpmyadmin Phpmyadmin	Version 3.3.8.1
Phpmyadmin Phpmyadmin	Version 3.3.8
Phpmyadmin Phpmyadmin	Version 3.3.9.0
Phpmyadmin Phpmyadmin	Version 3.3.9.1
Phpmyadmin Phpmyadmin	Version 3.3.9.2
Phpmyadmin Phpmyadmin	Version 3.4.0.0