Description

Cross-site scripting (XSS) vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mishandled during double URL decoding.

Remediation

References

CVE-2016-5099

Related Vulnerabilities

Elgg Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-3964)

WordPress Plugin PropertyHive Remote Code Execution (1.4.25)

WordPress Plugin WP Ajax Recent Posts 'number' Parameter Cross-Site Scripting (1.0.1)

MySQL Other Vulnerability (CVE-2005-2558)

WordPress Plugin CSS & JavaScript Toolbox SQL Injection (9.2)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2016-5099