Description

Multiple cross-site scripting (XSS) vulnerabilities in libraries/display_export.lib.php in phpMyAdmin 3.4.x before 3.4.9 allow remote attackers to inject arbitrary web script or HTML via crafted URL parameters, related to the export panels in the (1) server, (2) database, and (3) table sections.

Remediation

References

CVE-2011-4780

Related Vulnerabilities

jQuery UI Autocomplete Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41182)

WordPress Plugin bbPress Members Only Cross-Site Request Forgery (1.2.1)

WordPress Plugin Inline Call To Action Builder Lite-Free Call To Action Layer for WordPress includes Backdoor [Only if downloaded via the vendor website] (1.1.0)

WebLogic CVE-2022-21548 Vulnerability (CVE-2022-21548)

Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-0328)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2011-4780