Description

Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery (CSRF) attack to create a root account, via a crafted URL, related to js/ajax.js.

Remediation

References

CVE-2014-6300

Related Vulnerabilities

PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-7484)

WordPress Plugin WP Project Manager-Task, team, and project management featuring kanban board and gantt charts Cross-Site Scripting (2.4.13)

WordPress 3.7.1 Multiple Vulnerabilities (3.7 - 3.7.1)

WordPress Plugin All-in-One WP Migration Security Bypass (7.14)

XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-46242)

Severity

Medium

Classification

CVE-2014-6300 CWE-707

Tags

Missing Update Known Vulnerabilities