Description
Multiple cross-site scripting (XSS) vulnerabilities in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) table name or (2) column name that is improperly handled during construction of an AJAX confirmation message.
Remediation
References
Related Vulnerabilities
WordPress Plugin Google Adsense and Hotel Booking Open Proxy (1.0.5)
WordPress Plugin Wp-FileManager 'ajaxfilemanager.php' Arbitrary File Upload (1.2)
WordPress Other Vulnerability (CVE-2007-3639)
WordPress Plugin Helios Solutions Brand Logo Slider Arbitrary File Upload (2.1)
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9048)