CVE-2013-3742

2013-07-04T14:33:00
ID CVE-2013-3742
Type cve
Reporter cve@mitre.org
Modified 2013-09-07T06:30:00

Description

Cross-site scripting (XSS) vulnerability in view_create.php (aka the Create View page) in phpMyAdmin 4.x before 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via an invalid SQL CREATE VIEW statement with a crafted name that triggers an error message.