Description
Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by injecting arbitrary JavaScript or HTML in a (1) db or (2) table parameter value followed by an uppercase </SCRIPT> end tag, which bypasses the protection against lowercase </script>.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Automatic SQL Injection (3.92.0)
phpMyAdmin Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-4987)
WordPress 2.0.5 Charset Decoding SQL Injection Vulnerability (0.6.2 - 2.0.5)
PHP Other Vulnerability (CVE-2007-1411)
WordPress Plugin Leaflet 'id' Parameter Cross-Site Scripting (0.0.1)