GitHub Advisoryadvisory · Packagist

GHSA-3p87-w3c5-27gf phpMyAdmin Multiple XSS Vulnerabilities After Inline Editing and Save

LOW Published 2022-05-17 Modified 2024-01-15 Official page ↗
Aliases
CVE-2011-3591
Ecosystem
Packagist
Packages
phpmyadmin/phpmyadmin
Severity
Low
Weaknesses
CWE-79
Reviewed
2024-01-15

Affected packages

• Packagist phpmyadmin/phpmyadmin: >= 3.4.0, < 3.4.5 → fixed in 3.4.5

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row that triggers an improperly constructed confirmation message after inline-editing and save operations, related to (1) `js/functions.js` and (2) `js/tbl_structure.js`.

Related

Alias · CVE (1)

  • CVE-2011-3591 Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References