Description
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the Username to libraries/auth/cookie.auth.lib.php or (2) the error parameter to error.php.
Remediation
References
Related Vulnerabilities
WordPress Plugin Mailing List 'dl.php' Arbitrary File Download (1.4.1)
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.18)
Envoy Proxy Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2024-32976)
Drupal Core 5.x Security Bypass (5.0 - 5.2)
WordPress Plugin WP Activity Log Premium SQL Injection (4.6.4)