What is GHSA-frv8-xjcp-hrm2?

GHSA-frv8-xjcp-hrm2 is a security advisory published by GitHub Security Advisories with Medium severity. phpMyAdmin Cross-site Scripting vulnerability

Which CVE IDs does GHSA-frv8-xjcp-hrm2 cover?

GHSA-frv8-xjcp-hrm2 covers the following CVE IDs: CVE-2010-2958. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-frv8-xjcp-hrm2?

GHSA-frv8-xjcp-hrm2 affects 1 product, including: composer/phpmyadmin/phpmyadmin:\u003e= 3.0.0, \u003c 3.3.6.

GHSA-frv8-xjcp-hrm2Medium

phpMyAdmin Cross-site Scripting vulnerability

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

April 12, 2025

🔗 CVE IDs covered (1)

CVE-2010-2958 →

📋 Description

Cross-site scripting (XSS) vulnerability in libraries/Error.class.php in phpMyAdmin 3.x before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to a PHP backtrace and error messages (aka debugging messages), a different vulnerability than CVE-2010-3056.

🎯 Affected products1

composer/phpmyadmin/phpmyadmin:>= 3.0.0, < 3.3.6

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2010-2958
http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commit;h=133a77fac7d31a38703db2099a90c1b49de62e37
http://www.openwall.com/lists/oss-security/2010/09/01/2
http://www.openwall.com/lists/oss-security/2010/09/01/3
http://www.phpmyadmin.net/home_page/security/PMASA-2010-6.php
http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=133a77fac7d31a38703db2099a90c1b49de62e37
https://github.com/advisories/GHSA-frv8-xjcp-hrm2