Description

Cross-site scripting (XSS) vulnerability in the redirection feature in url.php in phpMyAdmin 4.2.x before 4.2.13.1 allows remote attackers to inject arbitrary web script or HTML via the url parameter.

Remediation

References

CVE-2014-9219

Related Vulnerabilities

concrete5 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-24986)

WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.32)

WordPress Plugin Really Simple Gallery Cross-Site Scripting (1.4)

WordPress Plugin WooCommerce OpenPOS SQL Injection (6.4.4)

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-15139)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2014-9219