Candidate: CVE-2011-3181 PublicDate: 2011-08-29 17:55:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3181 Description: Multiple cross-site scripting (XSS) vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x before 3.3.10.4 and 3.4.x before 3.4.4 allow remote attackers to inject arbitrary web script or HTML via a (1) table name, (2) column name, or (3) index name. Ubuntu-Description: Notes: Bugs: https://bugs.launchpad.net/ubuntu/+source/phpmyadmin/+bug/834426 Priority: medium Discovered-by: Assigned-to: CVSS: Patches_phpmyadmin: upstream_phpmyadmin: released (4:3.4.4-1) hardy_phpmyadmin: ignored (reached end-of-life) lucid_phpmyadmin: ignored (reached end-of-life) maverick_phpmyadmin: ignored (reached end-of-life) natty_phpmyadmin: ignored (reached end-of-life) oneiric_phpmyadmin: released (4:3.4.4-1) precise_phpmyadmin: released (4:3.4.4-1) quantal_phpmyadmin: released (4:3.4.4-1) raring_phpmyadmin: released (4:3.4.4-1) saucy_phpmyadmin: released (4:3.4.4-1) devel_phpmyadmin: released (4:3.4.4-1)