CVE-2010-2958
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2010-2958
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cross-site scripting (XSS) vulnerability in libraries/Error.class.php in phpMyAdmin 3.x before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to a PHP backtrace and error messages (aka debugging messages), a different vulnerability than CVE-2010-3056.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
phpMyAdmin 'libraries/Error.class.php'脚本跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
phpMyAdmin是一个免费工具，为管理MySQL提供了一个WWW管理接口。 phpMyAdmin 3.3.6之前的3.x版本中的libraries/Error.class.php脚本中存在跨站脚本攻击漏洞。远程攻击者可以借助与PHP回溯和错误消息（又名调试消息）有关的向量注入任意web脚本或HTML。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2010-2958
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-2958
请登录查看更多情报信息。
- http://www.phpmyadmin.net/home_page/security/PMASA-2010-6.phpx_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2010-2958
Same Patch Batch · n/a · 2010-09-08 · 15 CVEs total
| CVE-2010-2066 | Linux kernel 'mext_check_arguments'函数权限许可和访问控制问题漏洞 | |
| CVE-2010-2492 | Linux kernel 缓冲区错误漏洞 | |
| CVE-2010-2524 | Linux kernel CIFS DNS解析功能设计错误漏洞 | |
| CVE-2010-2798 | Linux kernel 代码问题漏洞 | |
| CVE-2010-2960 | Linux kernel 'keyctl_session_to_parent'函数空指针应用错误漏洞 | |
| CVE-2009-4895 | Linux kernel 'tty_fasync'函数竞争条件漏洞 | |
| CVE-2010-2495 | Linux kernel 代码问题漏洞 | |
| CVE-2010-2803 | Linux kenerl 'drm_ioctl'函数信息泄露漏洞 | |
| CVE-2010-2955 | Linux kernel 'cfg80211_wext_giwessid'函数程序设计漏洞 | |
| CVE-2010-2959 | Linux kernel 'net/can/bcm.c'函数整数溢出漏洞 | |
| CVE-2010-3004 | HP Operations Agent未明安全漏洞 | |
| CVE-2010-3005 | HP Operations Agent未明权限许可和访问控制漏洞 | |
| CVE-2010-3198 | Zope ZServer设计错误漏洞 | |
| CVE-2010-3264 | Novell Identity Manager引擎安装程序信息泄露漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2010-2958
No comments yet