CVE-2008-3457

Published Aug 4, 2008 CVSS 2.0 · 2.6 Low EPSS 1.8% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify config/config.inc.php.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1641-1 New phpmyadmin packages fix several issues
EUVD EUVD EUVD-2008-3443 Cross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify config/config.inc.php.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 9:37 AM
Reserved
Aug 4, 2008, 12:00 AM
Status
Modified
Published
Aug 4, 2008, 7:41 PM
Modified
Jun 16, 2026, 10:55 PM