Description
An XSS issue was discovered in phpMyAdmin because of an improper fix for CVE-2016-2559 in PMASA-2016-10. This issue is resolved by using a copy of a hash to avoid a race condition. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
Remediation
References
Related Vulnerabilities
WordPress Plugin Universal Analytics Cross-Site Scripting (1.3.0)
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2048)
WordPress Plugin WP-Matomo (WP-Piwik) Unspecified Vulnerability (1.0.18)
MediaWiki Other Vulnerability (CVE-2006-0322)
Microsoft SQL Server CVE-2023-23384 Vulnerability (CVE-2023-23384)