CVE-2009-1150
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2009-1150
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2009-1150.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2009-1150
- Downstream
- Published
- 2009-03-26T14:30:00Z
- Modified
- 2025-04-09T00:30:58Z
- Summary
- [none]
- Details
-
Multiple cross-site scripting (XSS) vulnerabilities in the export page (displayexport.lib.php) in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allow remote attackers to inject arbitrary web script or HTML via the pmadbfilenametemplate cookie.
- References
-
- http://secunia.com/advisories/34430
- http://secunia.com/advisories/34642
- http://secunia.com/advisories/35585
- http://secunia.com/advisories/35635
- http://security.gentoo.org/glsa/glsa-200906-03.xml
- http://www.debian.org/security/2009/dsa-1824
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:115
- http://www.phpmyadmin.net/home_page/security/PMASA-2009-2.php
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
- http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/trunk/phpMyAdmin/libraries/display_export.lib.php?r1=11986&r2=12302&pathrev=12302
- http://www.securityfocus.com/bid/34251
- https://security-tracker.debian.org/tracker/CVE-2009-1150
Affected packages
Debian:11 / phpmyadmin
Package
- Name
- phpmyadmin
- Purl
- pkg:deb/debian/phpmyadmin?arch=source
Debian:12 / phpmyadmin
Package
- Name
- phpmyadmin
- Purl
- pkg:deb/debian/phpmyadmin?arch=source
Debian:13 / phpmyadmin
Package
- Name
- phpmyadmin
- Purl
- pkg:deb/debian/phpmyadmin?arch=source