Description

Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery (CSRF) attack to create a root account, via a crafted URL, related to js/ajax.js.

Remediation

References

CVE-2014-6300

Related Vulnerabilities

MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2021-32036)

WordPress Plugin ALO EasyMail Newsletter Multiple Vulnerabilities (2.6.00)

WordPress Plugin WP Gravity Forms Insightly Cross-Site Scripting (1.0.6)

WordPress Plugin Nextend Google Connect Unspecified Vulnerability (1.5.3)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-37065)

Severity

Medium

Classification

CVE-2014-6300 CWE-707

Tags

Missing Update Known Vulnerabilities