Description
Cross-site scripting (XSS) vulnerability in db_create.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to inject arbitrary web script or HTML via a hex-encoded IMG element in the db parameter in a POST request, a different vulnerability than CVE-2006-6942.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Survey & Poll-Quiz, Survey and Poll SQL Injection (1.1.91)
Chamilo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-59541)
Oracle JRE CVE-2019-2894 Vulnerability (CVE-2019-2894)
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-50169)
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2024-1102)