GitHub Advisoryadvisory · Packagist

GHSA-5gh4-v2ch-pcx4 phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities

MEDIUM Published 2022-05-17 Modified 2023-08-29 Official page ↗
Aliases
CVE-2013-4997
Ecosystem
Packagist
Packages
phpmyadmin/phpmyadmin
Severity
Moderate
Weaknesses
CWE-79
Reviewed
2023-08-29

Affected packages

• Packagist phpmyadmin/phpmyadmin: >= 3.5, < 3.5.8.2 → fixed in 3.5.8.2

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in (1) an anchor identifier to setup/index.php or (2) a chartTitle (aka chart title) value.

Related

Alias · CVE (1)

  • CVE-2013-4997 Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References