Description

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.1.x before 4.1.14.1 and 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name that is improperly handled after a (1) hide or (2) unhide action.

Remediation

References

CVE-2014-4349

Related Vulnerabilities

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12708)

WordPress Plugin YaySMTP-Simple WP SMTP Mail Cross-Site Scripting (2.2.1)

Oracle JRE CVE-2013-1563 Vulnerability (CVE-2013-1563)

WordPress Plugin Smash Balloon Social Post Feed Cross-Site Scripting (2.19.1)

Werkzeug WSGI Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-25577)

Severity

Low

Classification

CVE-2014-4349 CWE-707

Tags

Missing Update Known Vulnerabilities