phpMyAdmin extension for TYPO3 has Cross-site Scripting vulnerability

MEDIUM 4.3CVE-2008-3032 · GHSA-pm5m-9h5r-xcrg · Published 07/07/2008 · updated 16/06/2026

In short

CVE-2008-3032 is a MEDIUM (CVSS 4.3) vulnerability affecting mehrwert/phpmyadmin, phpmyadmin (typo3).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.8% of all vulnerabilities.
Fix: update to 3.2.0 or later.

Package	Affected versions	Patched versions
mehrwert/phpmyadmin Packagist	`< 3.2.0`	`3.2.0`
phpmyadmin typo3	`= 0.2.2= 3.0≤ 3.0.1`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the phpMyAdmin (phpmyadmin) extension 3.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

NVD description

Cross-site scripting (XSS) vulnerability in the phpMyAdmin (phpmyadmin) extension 3.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

nvd.nist.gov/vuln/detail/CVE-2008-3032 · ADVISORY
exchange.xforce.ibmcloud.com/vulnerabilities/43508 · WEB
mehrwert/TYPO3-phpMyAdmin · PACKAGE
web.archive.org/web/20080825005206/http://typo3.org/teams/security/security-bulletins/typo3-20080701-2 · WEB
web.archive.org/web/20200228133438/https://www.securityfocus.com/bid/30039 · WEB
secunia.com/advisories/30884 · Vendor Advisory
typo3.org/teams/security/security-bulletins/typo3-20080701-2 · Patch
securityfocus.com/bid/30039

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free