CVE-2010-4480

Publication date 8 December 2010

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

error.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted BBcode tag containing ”@” characters, as demonstrated using ”[a@url@page]”.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
phpmyadmin 11.10 oneiric
Not affected
11.04 natty
Not affected
10.10 maverick
Fixed 4:3.3.7-3build0.10.10.1
10.04 LTS lucid
Fixed 4:3.3.2-1ubuntu1
9.10 karmic Ignored end of life
8.04 LTS hardy Ignored end of life
6.06 LTS dapper Ignored end of life