GitHub Advisoryadvisory · Packagist

GHSA-rfpg-2fp8-2fph phpMyAdmin multiple cross-site scripting vulnerabilities

LOW Published 2022-05-17 Modified 2023-08-29 Official page ↗
Aliases
CVE-2012-5339
Ecosystem
Packagist
Packages
phpmyadmin/phpmyadmin
Severity
Low
Weaknesses
CWE-79
Reviewed
2023-08-29

Affected packages

• Packagist phpmyadmin/phpmyadmin: >= 3.5, < 3.5.3 → fixed in 3.5.3

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted name of (1) an event, (2) a procedure, or (3) a trigger.

Related

Alias · CVE (1)

  • CVE-2012-5339 Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.3 allow remote authenticated users to inject arbitrary… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References