Lucene search
HistoryJul 31, 2013 - 1:20 p.m.
CVE-2013-4997
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
44.3%
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in (1) an anchor identifier to setup/index.php or (2) a chartTitle (aka chart title) value.
Affected configurations
Node
phpmyadminphpmyadminMatch3.5.0.0
ORphpmyadminphpmyadminMatch3.5.1.0
ORphpmyadminphpmyadminMatch3.5.2.0
ORphpmyadminphpmyadminMatch3.5.2.1
ORphpmyadminphpmyadminMatch3.5.2.2
ORphpmyadminphpmyadminMatch3.5.3.0
ORphpmyadminphpmyadminMatch3.5.4
ORphpmyadminphpmyadminMatch3.5.5
ORphpmyadminphpmyadminMatch3.5.6
ORphpmyadminphpmyadminMatch3.5.7
ORphpmyadminphpmyadminMatch3.5.7rc1
ORphpmyadminphpmyadminMatch3.5.8
ORphpmyadminphpmyadminMatch3.5.8rc1
ORphpmyadminphpmyadminMatch3.5.8.1
Related
ubuntucve
ubuntucve
CVE-2013-4997
2013-07-31 00:00:00
prion
prion
Cross site scripting
2013-07-31 13:20:00
github
github
phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities
2022-05-17 05:07:14
cve
cve
CVE-2013-4997
2022-10-03 16:14:58
osv
osv
phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities
2022-05-17 05:07:14
debiancve
debiancve
CVE-2013-4997
2022-10-03 16:14:58
cvelist
cvelist
CVE-2013-4997
2022-10-03 16:14:58
phpmyadmin
phpmyadmin
5 XSS vulnerabilities in setup, chart display, process list, and logo link.
2013-07-28 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2013-0238)
2022-01-28 00:00:00
Gentoo Security Advisory GLSA 201311-02
2015-09-29 00:00:00
mageia
mageia
Updated phpmyadmin packages fix security vulnerabilities
2013-07-29 18:06:10
nessus
nessus
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2013-11-04 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
44.3%
Related for NVD:CVE-2013-4997