Cross-Site Scripting Vulnerabilities in phpPgAdmin by phpPgAdmin

CVE-2011-3598

What is CVE-2011-3598?

phpPgAdmin prior to version 5.0.3 contains multiple cross-site scripting vulnerabilities. Attackers can exploit these flaws by injecting arbitrary web scripts or HTML code into the application through manipulated web page titles or via query parameters such as return_url and return_desc in display.php. Successful exploitation may lead to the execution of malicious scripts in the context of users interacting with the compromised application, potentially compromising sensitive user data and session information.

References