CVE-2011-3598

Published: Oct 8, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) a web page title, related to classes/Misc.php; or the (2) return_url or (3) return_desc parameter to display.php.

Affected (17)

Products: Phppgadmin: Phppgadmin

1 product

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Phppgadmin Phppgadmin	Up to 5.0.2
Phppgadmin Phppgadmin	Version 2.2.1
Phppgadmin Phppgadmin	Version 2.2
Phppgadmin Phppgadmin	Version 3.1
Phppgadmin Phppgadmin	Version 3.2
Phppgadmin Phppgadmin	Version 3.3
Phppgadmin Phppgadmin	Version 3.4.1
Phppgadmin Phppgadmin	Version 3.4
Phppgadmin Phppgadmin	Version 3.5.2
Phppgadmin Phppgadmin	Version 3.5.3
Phppgadmin Phppgadmin	Version 3.5
Phppgadmin Phppgadmin	Version 4.1.1
Phppgadmin Phppgadmin	Version 4.2.1
Phppgadmin Phppgadmin	Version 4.2.2
Phppgadmin Phppgadmin	Version 4.2.3
Phppgadmin Phppgadmin	Version 5.0.0
Phppgadmin Phppgadmin	Version 5.0.1

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (32)

http://freshmeat.net/projects/phppgadmin/releases/336969

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-October/067843.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-October/067846.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068009.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2012-04/msg00033.html

Source: secalert@redhat.com

http://osvdb.org/75997

Source: secalert@redhat.com

http://osvdb.org/75998

Source: secalert@redhat.com

http://secunia.com/advisories/46248

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46426

Source: secalert@redhat.com

http://sourceforge.net/mailarchive/forum.php?thread_name=4E897F6C.90905%40free.fr&forum_name=phppgadmin-news

Source: secalert@redhat.com

Patch

http://www.openwall.com/lists/oss-security/2011/10/04/1

Source: secalert@redhat.com

Patch

http://www.openwall.com/lists/oss-security/2011/10/04/10

Source: secalert@redhat.com

Patch

http://www.securityfocus.com/bid/49914

Source: secalert@redhat.com

https://bugs.gentoo.org/show_bug.cgi?id=385505

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=743205

Source: secalert@redhat.com

Patch

https://github.com/phppgadmin/phppgadmin/commit/1df248203de055f97e092b50b1dd9643ccb73842

Source: secalert@redhat.com

Patch

http://freshmeat.net/projects/phppgadmin/releases/336969

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-October/067843.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-October/067846.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068009.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2012-04/msg00033.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/75997

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/75998

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/46248

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/46426

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/mailarchive/forum.php?thread_name=4E897F6C.90905%40free.fr&forum_name=phppgadmin-news

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.openwall.com/lists/oss-security/2011/10/04/1

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.openwall.com/lists/oss-security/2011/10/04/10

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/49914

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.gentoo.org/show_bug.cgi?id=385505

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=743205

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://github.com/phppgadmin/phppgadmin/commit/1df248203de055f97e092b50b1dd9643ccb73842

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.