Description
Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by injecting arbitrary JavaScript or HTML in a (1) db or (2) table parameter value followed by an uppercase </SCRIPT> end tag, which bypasses the protection against lowercase </script>.
Remediation
References
Related Vulnerabilities
Craft CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-14280)
MySQL CVE-2020-14614 Vulnerability (CVE-2020-14614)
MySQL CVE-2021-2169 Vulnerability (CVE-2021-2169)
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1000862)
Apache HTTP Server Resource Management Errors Vulnerability (CVE-2005-3357)