Description
setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows remote attackers to conduct static code injection attacks by leveraging the ability to modify the SESSION superglobal array.
Remediation
References
Related Vulnerabilities
WordPress Plugin OMFG Mobile Pro Cross-Site Scripting (1.1.26)
WordPress Plugin WordPress Alipay/Tenpay/PayPal SQL Injection (3.7.2)
Microsoft SQL Server CVE-2024-0056 Vulnerability (CVE-2024-0056)
WordPress Plugin MouseWheel Smooth Scroll Cross-Site Request Forgery (5.6)
MediaWiki Incorrect Authorization Vulnerability (CVE-2022-29906)