GitHub Advisoryadvisory · Packagist

GHSA-5p69-rmx8-7gw7 phpMyAdmin Multiple XSS Vulnerabilities

LOW Published 2022-05-17 Modified 2024-01-15 Official page ↗
Aliases
CVE-2011-3592
Ecosystem
Packagist
Packages
phpmyadmin/phpmyadmin
Severity
Low
Weaknesses
CWE-79
Reviewed
2024-01-15

Affected packages

• Packagist phpmyadmin/phpmyadmin: >= 3.4.0, < 3.4.5 → fixed in 3.4.5

Description

Multiple cross-site scripting (XSS) vulnerabilities in the `PMA_unInlineEditRow` function in js/sql.js in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a (1) database name, (2) table name, or (3) column name that is not properly handled after an inline-editing operation.

Related

Alias · CVE (1)

  • CVE-2011-3592 Multiple cross-site scripting (XSS) vulnerabilities in the PMA_unInlineEditRow function in js/sql.js in phpMyAdmin 3.4.x before 3.4.5 allow… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References