Description
Cross-site scripting (XSS) vulnerability in view_create.php (aka the Create View page) in phpMyAdmin 4.x before 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via an invalid SQL CREATE VIEW statement with a crafted name that triggers an error message.
Remediation
References
Related Vulnerabilities
WordPress Plugin Theme Demo Import Arbitrary File Upload (1.1.0)
WordPress Credentials Management Errors Vulnerability (CVE-2009-2762)
phpMyAdmin Improper Authentication Vulnerability (CVE-2010-4481)
WordPress Plugin Simple Backup Arbitrary File Download (2.7.10)
XWikiplatform Missing Authorization Vulnerability (CVE-2024-45591)