Summary
The host is running phpMyAdmin and is prone to Cross-Site Scripting Vulnerability.
Impact
Successful exploitation will allow attackers to execute arbitrary web script or HTML in a user's browser session in the context of an affected site.
Impact Level: Application
Solution
Upgrade to phpMyAdmin version 3.3.7 or later,
For updates refer to http://www.phpmyadmin.net/home_page/downloads.php
Insight
The flaw is caused by an unspecified input validation error when processing spoofed requests sent to setup script, which could be exploited by attackers to cause arbitrary scripting code to be executed on the user's browser session in the security context of an affected site.
Affected
phpMyAdmin versions 3.x before 3.3.7
References
Severity
Classification
-
CVE CVE-2010-3263 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related Vulnerabilities