Description

Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action.

Remediation

References

CVE-2014-1879

Related Vulnerabilities

PostgreSQL Resource Management Errors Vulnerability (CVE-2009-0922)

Drupal Core 8.6.x Multiple Vulnerabilities (8.6.0 - 8.6.1)

WordPress Plugin Paid Business Listings Blind SQL Injection (1.0.2)

Atlassian Jira Improper Authentication Vulnerability (CVE-2021-41312)

Apache Tomcat Session Fixation Vulnerability (CVE-2019-17563)

Severity

Low

Classification

CVE-2014-1879 CWE-707

Tags

Missing Update Known Vulnerabilities