Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-RFPG-2FP8-2FPH
HistoryMay 17, 2022 - 5:16 a.m.

phpMyAdmin multiple cross-site scripting vulnerabilities

2022-05-1705:16:32
CWE-79
GitHub Advisory Database
github.com
6
phpmyadmin
xss
vulnerabilities
3.5.x
web script
html
remote authenticated users
event
procedure
trigger

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.001

Percentile

48.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted name of (1) an event, (2) a procedure, or (3) a trigger.

Affected configurations

Vulners
Node
phpmyadminphpmyadminRange3.5–3.5.3
VendorProductVersionCPE
phpmyadminphpmyadmin*cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*

Related

osv 2
seebug 1
prion 1
ubuntucve 1
nvd 1
cvelist 1
debiancve 1
phpmyadmin 1
cve 1
openvas 4
nessus 3
freebsd 1
osv
osv
phpMyAdmin multiple cross-site scripting vulnerabilities
2022-05-17 05:16:32
phpMyAdmin-4.6.5.2-1.1 on GA media
2024-06-15 00:00:00
seebug
seebug
phpMyAdmin 3.5.x HTML注入漏洞
2012-10-16 00:00:00
prion
prion
Cross site scripting
2012-10-25 10:51:00
ubuntucve
ubuntucve
CVE-2012-5339
2012-10-25 00:00:00
nvd
nvd
CVE-2012-5339
2012-10-25 10:51:28
cvelist
cvelist
CVE-2012-5339
2012-10-25 10:00:00
debiancve
debiancve
CVE-2012-5339
2012-10-25 10:51:28
phpmyadmin
phpmyadmin
Multiple XSS due to unescaped HTML output in Trigger, Procedure and Event pages.
2012-10-12 00:00:00
cve
cve
CVE-2012-5339
2012-10-25 10:51:28
openvas
openvas
phpMyAdmin 3.5.x < 3.5.3 Multiple Vulnerabilities (PMASA-2012-6, PMASA-2012-7) - Linux
2017-09-11 00:00:00
FreeBSD Ports: phpMyAdmin
2012-10-22 00:00:00
phpMyAdmin 3.5.x < 3.5.3 Multiple Vulnerabilities (PMASA-2012-6, PMASA-2012-7) - Windows
2017-09-11 00:00:00
nessus
nessus
openSUSE Security Update : phpMyAdmin (openSUSE-SU-2012:1507-1)
2014-06-13 00:00:00
phpMyAdmin 3.5.x < 3.5.3 Multiple Vulnerabilities (PMASA-2012-6 - PMASA-2012-7)
2012-10-23 00:00:00
FreeBSD : phpMyAdmin -- Multiple XSS due to unescaped HTML output in Trigger, Procedure and Event pages and Fetching the version information from a non-SSL site is vulnerable to a MITM attack (ef417da3-1640-11e2-999b-e0cb4e266481)
2012-10-15 00:00:00
freebsd
freebsd
phpMyAdmin -- Multiple XSS due to unescaped HTML output in Trigger, Procedure and Event pages and Fetching the version information from a non-SSL site is vulnerable to a MITM attack
2012-10-08 00:00:00

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.001

Percentile

48.1%

JSON
Related for GHSA-RFPG-2FP8-2FPH
osv2seebug1prion1ubuntucve1nvd1cvelist1debiancve1phpmyadmin1cve1openvas4nessus3freebsd1