Lucene search

K
nessusTenable8316.PRM
HistoryJun 30, 2014 - 12:00 a.m.

phpMyAdmin 4.1.x < 4.1.14.1, 4.2.x < 4.2.4 Multiple XSS

2014-06-3000:00:00
Tenable
www.tenable.com
15

Versions of phpMyAdmin earlier than 4.1.14.1 or 4.2.4 are affected by multiple cross-site scripting vulnerabilities, due to insufficient user input sanitation in the following areas :

  • Input related to Recent/Favorite table navigation.
  • Input of crafted table names, when hiding or unhiding a table in navigation.
Binary data 8316.prm
VendorProductVersionCPE
phpmyadminphpmyadmincpe:/a:phpmyadmin:phpmyadmin