Description

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1 allow remote attackers to inject arbitrary web script or HTML via a crafted table name that triggers improper HTML rendering on a Tracking page, related to (1) libraries/tbl_links.inc.php and (2) tbl_tracking.php.

Remediation

References

CVE-2011-1940

Related Vulnerabilities

MediaWiki Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2021-44856)

WordPress Plugin Vision Interactive For WordPress Cross-Site Scripting (1.4.4)

PHP Resource Management Errors Vulnerability (CVE-2010-4697)

Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2019-10086)

EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7987)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2011-1940