CVE Database
/

CVE-2009-1150

Back to search

CVE-2009-1150

Published: Mar 26, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allow remote attackers to inject arbitrary web script or HTML via the pma_db_filename_template cookie.

VendorProductVersions

n/a

n/a

affected
n/a

References

GLSA-200906-03
vendor-advisory
x_refsource_GENTOO
34251
vdb-entry
x_refsource_BID
34642
third-party-advisory
x_refsource_SECUNIA
DSA-1824
vendor-advisory
x_refsource_DEBIAN
SUSE-SR:2009:008
vendor-advisory
x_refsource_SUSE
MDVSA-2009:115
vendor-advisory
x_refsource_MANDRIVA
34430
third-party-advisory
x_refsource_SECUNIA
35635
third-party-advisory
x_refsource_SECUNIA
35585
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now