Description

Cross-site scripting (XSS) vulnerability in libraries/schema/Export_Relation_Schema.class.php in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted pageNumber value to schema_export.php.

Remediation

References

CVE-2013-5002

Related Vulnerabilities

Joomla! Core 1.0.x Multiple Unspecified Vulnerabilities (1.0.0 - 1.0.7)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3393)

PHP Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2011-0754)

Moodle Resource Management Errors Vulnerability (CVE-2015-2268)

Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-1000504)

Severity

Low

Classification

CVE-2013-5002 CWE-707

Tags

Missing Update Known Vulnerabilities