Description
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allow remote authenticated users to inject arbitrary web script or HTML via a (1) table name, (2) SET value, (3) search query, or (4) hostname in a Location header.
Remediation
References
Related Vulnerabilities
WordPress Plugin LiveGrounds 'uid' Parameter Cross-Site Scripting (0.42)
TYPO3 CVE-2013-7080 Vulnerability (CVE-2013-7080)
ZenCart Improper Authentication Vulnerability (CVE-2009-2255)
osTicket Observable Discrepancy Vulnerability (CVE-2026-26895)
WordPress Plugin Gallery PhotoBlocks Unspecified Vulnerability (1.1.32)