CVE-2010-4480

error.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted BBcode tag containing "@" characters, as demonstrated using "[a@url@page]".

• CWE-79

• http://secunia.com/advisories/42485Vendor Advisory
• http://secunia.com/advisories/42725Vendor Advisory
• http://www.debian.org/security/2010/dsa-2139
• http://www.exploit-db.com/exploits/15699Exploit
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:000
• http://www.phpmyadmin.net/home_page/security/PMASA-2010-9.php
• http://www.securityfocus.com/bid/45633
• http://www.vupen.com/english/advisories/2010/3133Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0001Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0027Vendor Advisory
• http://secunia.com/advisories/42485Vendor Advisory
• http://secunia.com/advisories/42725Vendor Advisory
• http://www.debian.org/security/2010/dsa-2139
• http://www.exploit-db.com/exploits/15699Exploit
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:000
• http://www.phpmyadmin.net/home_page/security/PMASA-2010-9.php
• http://www.securityfocus.com/bid/45633
• http://www.vupen.com/english/advisories/2010/3133Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0001Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0027Vendor Advisory

Published

Dec 8, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4474Unspecified vulnerability in the Java DB component in Oracle…
• CVE-2010-4475Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2010-4476The Double.parseDouble method in Java Runtime Environment (J…
• CVE-2010-4477Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4478OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not pr…9.8
• CVE-2010-4479Unspecified vulnerability in pdf.c in libclamav in ClamAV be…
• CVE-2010-4481phpMyAdmin before 3.4.0-beta1 allows remote attackers to byp…
• CVE-2010-4482Unspecified vulnerability in Google Chrome before 8.0.552.21…
• CVE-2010-4483Google Chrome before 8.0.552.215 does not properly restrict …
• CVE-2010-4484Google Chrome before 8.0.552.215 does not properly handle HT…
• CVE-2010-4485Google Chrome before 8.0.552.215 does not properly restrict …
• CVE-2010-4486Use-after-free vulnerability in Google Chrome before 8.0.552…