Lucene search

K
freebsdFreeBSD0871D18B-9638-11E3-A371-6805CA0B3D42
HistoryFeb 15, 2014 - 12:00 a.m.

phpMyAdmin -- Self-XSS due to unescaped HTML output in import.

2014-02-1500:00:00
vuxml.freebsd.org
17

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

50.9%

The phpMyAdmin development team reports:

When importing a file with crafted filename, it is
possible to trigger an XSS. We consider this vulnerability
to be non critical.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchphpmyadmin= 3.3.1UNKNOWN
FreeBSDanynoarchphpmyadmin< 4.1.7UNKNOWN

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

50.9%