Description
Cross-site scripting (XSS) vulnerability in libraries/error_report.lib.php in the error-reporting feature in phpMyAdmin 4.1.x before 4.1.14.7 and 4.2.x before 4.2.12 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename.
Remediation
References
Related Vulnerabilities
WordPress Plugin Email Log SQL Injection (2.4.6)
Oracle Database Server CVE-2011-2230 Vulnerability (CVE-2011-2230)
MySQL CVE-2018-2812 Vulnerability (CVE-2018-2812)
WordPress 2.8.2 Multiple Security Bypass Vulnerabilities (2.0 - 2.8.2)
Drupal Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2025-13080)