製品・ソフトウェアに関する情報

JVN脆弱性詳細

phpMyAdmin におけるクロスサイトスクリプティングの脆弱性

Title	phpMyAdmin におけるクロスサイトスクリプティングの脆弱性
Summary	phpMyAdmin には、クロスサイトスクリプティングの脆弱性が存在します。
Possible impacts	第三者により、MySQL テーブルに対する巧妙に細工された名前を介して、任意の Web スクリプトまたは HTML を挿入される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Oct. 13, 2009, midnight
Registration Date	Dec. 20, 2012, 7:28 p.m.
Last Update	Dec. 20, 2012, 7:28 p.m.

CVSS2.0 : 警告
Score	4.3
Vector	AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected System

The phpMyAdmin Project

phpMyAdmin 2.11.9.6 未満の 2.11.x および 3.2.2.1 未満の 3.x

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2009-3696	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3696
National Vulnerability Database (NVD)
2	CVE-2009-3696	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3696

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-79	https://jvndb.jvn.jp/ja/cwe/CWE-79.html

ベンダー情報

No	Name	URL
phpMyAdmin
1	PMASA-2009-6	http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php

Change Log

No	Changed Details	Date of change
0	[2012年12月20日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2009-3696

Summary	Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.
Publication Date	Oct. 17, 2009, 1:30 a.m.
Registration Date	Jan. 29, 2021, 1:24 p.m.
Last Update	Aug. 17, 2017, 10:31 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:beta1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0beta1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.8:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.2:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.3:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.4:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.5:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-alpha:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-beta:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0-beta1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.2:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4:rc2::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0-beta1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.1:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.2:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.2:rc1::::::

Related information, measures and tools

No	URL	refsource	タグ
1	http://bugs.gentoo.org/show_bug.cgi?id=288899	CONFIRM
2	http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.html	CONFIRM
3	http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.html	CONFIRM
4	http://freshmeat.net/projects/phpmyadmin/releases/306667	CONFIRM
5	http://freshmeat.net/projects/phpmyadmin/releases/306669	CONFIRM
6	http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html	SUSE
7	http://marc.info/?l=oss-security&m=125553728512853&w=2	MLIST
8	http://marc.info/?l=oss-security&m=125561979001460&w=2	MLIST
9	http://secunia.com/advisories/37016	SECUNIA	Vendor Advisory
10	http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/	CONFIRM
11	http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/	CONFIRM
12	http://www.mandriva.com/security/advisories?name=MDVSA-2009:274	MANDRIVA
13	http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php	CONFIRM	Patch Vendor Advisory
14	http://www.securityfocus.com/bid/36658	BID
15	http://www.vupen.com/english/advisories/2009/2899	VUPEN	Patch Vendor Advisory
16	https://bugzilla.redhat.com/show_bug.cgi?id=528769	CONFIRM
17	https://exchange.xforce.ibmcloud.com/vulnerabilities/53742	XF
18	https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html	FEDORA
19	https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.html	FEDORA

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-79	クロスサイト・スクリプティング（XSS）	https://cwe.mitre.org/data/definitions/79.html

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:beta1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0beta1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.8:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.2:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.3:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.4:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.5:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-alpha:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-beta:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0-beta1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.2:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4:rc2::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0-beta1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.1:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.1:rc1::::::
cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.2:::::::*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.2:rc1::::::