ID de Prueba:	1.3.6.1.4.1.25623.1.0.103295
Categoría:	Web application abuses
Título:	phpPgAdmin Multiple XSS Vulnerabilities
Resumen:	phpPgAdmin is prone to multiple cross-site scripting (XSS); vulnerabilities because it fails to properly sanitize user-supplied input.
Descripción:	Summary: phpPgAdmin is prone to multiple cross-site scripting (XSS) vulnerabilities because it fails to properly sanitize user-supplied input. Vulnerability Impact: An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. Affected Software/OS: phpPgAdmin version 5.0.2 and probably prior. Solution: Vendor updates are available. Please see the references for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3598 46248 http://secunia.com/advisories/46248 46426 http://secunia.com/advisories/46426 49914 http://www.securityfocus.com/bid/49914 75997 http://osvdb.org/75997 75998 http://osvdb.org/75998 FEDORA-2011-13748 http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068009.html FEDORA-2011-13801 http://lists.fedoraproject.org/pipermail/package-announce/2011-October/067846.html FEDORA-2011-13805 http://lists.fedoraproject.org/pipermail/package-announce/2011-October/067843.html [oss-security] 20111004 CVE Request -- phpPgAdmin -- Multiple XSS flaws fixed in v5.0.3 http://www.openwall.com/lists/oss-security/2011/10/04/1 [oss-security] 20111004 Re: CVE Request -- phpPgAdmin -- Multiple XSS flaws fixed in v5.0.3 http://www.openwall.com/lists/oss-security/2011/10/04/10 [phppgadmin-news] 20111003 [ppa-news] phpPgAdmin 5.0.3 released http://sourceforge.net/mailarchive/forum.php?thread_name=4E897F6C.90905%40free.fr&forum_name=phppgadmin-news http://freshmeat.net/projects/phppgadmin/releases/336969 https://bugs.gentoo.org/show_bug.cgi?id=385505 https://bugzilla.redhat.com/show_bug.cgi?id=743205 https://github.com/phppgadmin/phppgadmin/commit/1df248203de055f97e092b50b1dd9643ccb73842 openSUSE-SU-2012:0493 http://lists.opensuse.org/opensuse-updates/2012-04/msg00033.html
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.