Lucene search
HistoryFeb 20, 2014 - 3:27 p.m.
CVE-2014-1879
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
51.5%
Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action.
Affected configurations
Node
phpmyadminphpmyadminRange≤4.1.6
ORphpmyadminphpmyadminMatch1.0.0
ORphpmyadminphpmyadminMatch1.0.1
ORphpmyadminphpmyadminMatch1.0.2
ORphpmyadminphpmyadminMatch1.0.3
ORphpmyadminphpmyadminMatch1.0.4
ORphpmyadminphpmyadminMatch1.0.5
ORphpmyadminphpmyadminMatch1.0.6
ORphpmyadminphpmyadminMatch1.0.6a
ORphpmyadminphpmyadminMatch1.0.7
ORphpmyadminphpmyadminMatch1.0.8
ORphpmyadminphpmyadminMatch1.1
ORphpmyadminphpmyadminMatch1.2
ORphpmyadminphpmyadminMatch1.2.1
ORphpmyadminphpmyadminMatch1.2.2
ORphpmyadminphpmyadminMatch1.2.3
ORphpmyadminphpmyadminMatch1.2.4
ORphpmyadminphpmyadminMatch1.2.5
ORphpmyadminphpmyadminMatch1.2.6
ORphpmyadminphpmyadminMatch1.2.7
ORphpmyadminphpmyadminMatch1.2.8
ORphpmyadminphpmyadminMatch1.2.9
ORphpmyadminphpmyadminMatch1.2.9.1
ORphpmyadminphpmyadminMatch1.2.9.2
ORphpmyadminphpmyadminMatch1.2.9.3
ORphpmyadminphpmyadminMatch1.2.9.4b
ORphpmyadminphpmyadminMatch1.2.9.4c
ORphpmyadminphpmyadminMatch1.2.9.5
ORphpmyadminphpmyadminMatch1.3
ORphpmyadminphpmyadminMatch1.3alpha
ORphpmyadminphpmyadminMatch2.11.0
ORphpmyadminphpmyadminMatch2.11.1.0
ORphpmyadminphpmyadminMatch2.11.1.1
ORphpmyadminphpmyadminMatch2.11.1.2
ORphpmyadminphpmyadminMatch2.11.2.0
ORphpmyadminphpmyadminMatch2.11.2.1
ORphpmyadminphpmyadminMatch2.11.2.2
ORphpmyadminphpmyadminMatch2.11.3.0
ORphpmyadminphpmyadminMatch2.11.4.0
ORphpmyadminphpmyadminMatch2.11.5.0
ORphpmyadminphpmyadminMatch2.11.5.1
ORphpmyadminphpmyadminMatch2.11.5.2
ORphpmyadminphpmyadminMatch2.11.6.0
ORphpmyadminphpmyadminMatch2.11.7.0
ORphpmyadminphpmyadminMatch2.11.7.1
ORphpmyadminphpmyadminMatch2.11.8.0
ORphpmyadminphpmyadminMatch2.11.9.0
ORphpmyadminphpmyadminMatch2.11.9.1
ORphpmyadminphpmyadminMatch2.11.9.2
ORphpmyadminphpmyadminMatch2.11.9.3
ORphpmyadminphpmyadminMatch2.11.9.4
ORphpmyadminphpmyadminMatch2.11.9.5
ORphpmyadminphpmyadminMatch2.11.9.6
ORphpmyadminphpmyadminMatch2.11.10.0
ORphpmyadminphpmyadminMatch2.11.10.1
ORphpmyadminphpmyadminMatch3.0.0
ORphpmyadminphpmyadminMatch3.0.0alpha
ORphpmyadminphpmyadminMatch3.0.0beta
ORphpmyadminphpmyadminMatch3.0.0rc1
ORphpmyadminphpmyadminMatch3.0.1
ORphpmyadminphpmyadminMatch3.0.1rc1
ORphpmyadminphpmyadminMatch3.0.1.1
ORphpmyadminphpmyadminMatch3.1.0
ORphpmyadminphpmyadminMatch3.1.0beta1
ORphpmyadminphpmyadminMatch3.1.1
ORphpmyadminphpmyadminMatch3.1.1rc1
ORphpmyadminphpmyadminMatch3.1.2
ORphpmyadminphpmyadminMatch3.1.2rc1
ORphpmyadminphpmyadminMatch3.1.3
ORphpmyadminphpmyadminMatch3.1.3rc1
ORphpmyadminphpmyadminMatch3.1.3.1
ORphpmyadminphpmyadminMatch3.1.3.2
ORphpmyadminphpmyadminMatch3.1.4
ORphpmyadminphpmyadminMatch3.1.4rc2
ORphpmyadminphpmyadminMatch3.1.5
ORphpmyadminphpmyadminMatch3.1.5rc1
ORphpmyadminphpmyadminMatch3.2.0
ORphpmyadminphpmyadminMatch3.2.0beta1
ORphpmyadminphpmyadminMatch3.2.0rc1
ORphpmyadminphpmyadminMatch3.2.1
ORphpmyadminphpmyadminMatch3.2.1rc1
ORphpmyadminphpmyadminMatch3.2.2
ORphpmyadminphpmyadminMatch3.2.2rc1
ORphpmyadminphpmyadminMatch3.3.0.0
ORphpmyadminphpmyadminMatch3.3.1.0
ORphpmyadminphpmyadminMatch3.3.2.0
ORphpmyadminphpmyadminMatch3.3.3.0
ORphpmyadminphpmyadminMatch3.3.4.0
ORphpmyadminphpmyadminMatch3.3.5.0
ORphpmyadminphpmyadminMatch3.3.5.1
ORphpmyadminphpmyadminMatch3.3.6
ORphpmyadminphpmyadminMatch3.3.7
ORphpmyadminphpmyadminMatch3.3.8
ORphpmyadminphpmyadminMatch3.3.8.1
ORphpmyadminphpmyadminMatch3.3.9.0
ORphpmyadminphpmyadminMatch3.3.9.1
ORphpmyadminphpmyadminMatch3.3.9.2
ORphpmyadminphpmyadminMatch3.3.10.0
ORphpmyadminphpmyadminMatch3.4.0.0
ORphpmyadminphpmyadminMatch3.4.1.0
ORphpmyadminphpmyadminMatch3.4.2.0
ORphpmyadminphpmyadminMatch3.4.3.0
ORphpmyadminphpmyadminMatch3.4.3.1
ORphpmyadminphpmyadminMatch3.4.3.2
ORphpmyadminphpmyadminMatch3.4.4.0
ORphpmyadminphpmyadminMatch3.4.5.0
ORphpmyadminphpmyadminMatch3.4.6.0
ORphpmyadminphpmyadminMatch3.4.7.0
ORphpmyadminphpmyadminMatch3.4.7.1
ORphpmyadminphpmyadminMatch3.4.8.0
ORphpmyadminphpmyadminMatch3.4.9.0
ORphpmyadminphpmyadminMatch3.4.10.0
ORphpmyadminphpmyadminMatch3.4.10.1
ORphpmyadminphpmyadminMatch3.4.10.2
ORphpmyadminphpmyadminMatch3.4.11
ORphpmyadminphpmyadminMatch3.5.0.0
ORphpmyadminphpmyadminMatch3.5.1.0
ORphpmyadminphpmyadminMatch3.5.2.0
ORphpmyadminphpmyadminMatch3.5.2.1
ORphpmyadminphpmyadminMatch3.5.2.2
ORphpmyadminphpmyadminMatch3.5.3.0
ORphpmyadminphpmyadminMatch3.5.4
ORphpmyadminphpmyadminMatch3.5.5
ORphpmyadminphpmyadminMatch3.5.6
ORphpmyadminphpmyadminMatch3.5.7
ORphpmyadminphpmyadminMatch3.5.7rc1
ORphpmyadminphpmyadminMatch3.5.8
ORphpmyadminphpmyadminMatch3.5.8rc1
ORphpmyadminphpmyadminMatch3.5.8.1
ORphpmyadminphpmyadminMatch3.5.8.2
ORphpmyadminphpmyadminMatch4.0.0
ORphpmyadminphpmyadminMatch4.0.0rc2
ORphpmyadminphpmyadminMatch4.0.0rc3
ORphpmyadminphpmyadminMatch4.0.1
ORphpmyadminphpmyadminMatch4.0.2
ORphpmyadminphpmyadminMatch4.0.3
ORphpmyadminphpmyadminMatch4.0.4
ORphpmyadminphpmyadminMatch4.0.4.1
ORphpmyadminphpmyadminMatch4.0.4.2
ORphpmyadminphpmyadminMatch4.0.5
ORphpmyadminphpmyadminMatch4.0.6
ORphpmyadminphpmyadminMatch4.0.7
ORphpmyadminphpmyadminMatch4.0.8
ORphpmyadminphpmyadminMatch4.0.9
ORphpmyadminphpmyadminMatch4.1.0
ORphpmyadminphpmyadminMatch4.1.1
ORphpmyadminphpmyadminMatch4.1.2
ORphpmyadminphpmyadminMatch4.1.3
ORphpmyadminphpmyadminMatch4.1.4
ORphpmyadminphpmyadminMatch4.1.5
Related
nessus
nessus
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0099)
2022-01-28 00:00:00
phpMyAdmin XSS Vulnerability (PMASA-2014-1) - Linux
2017-08-21 00:00:00
phpMyAdmin XSS Vulnerability (PMASA-2014-1) - Windows
2017-08-21 00:00:00
seebug
seebug
phpMyAdmin 'import.php'跨站脚本漏洞
2014-02-24 00:00:00
ubuntucve
ubuntucve
CVE-2014-1879
2014-02-20 00:00:00
cve
cve
CVE-2014-1879
2014-02-20 15:27:09
phpmyadmin
phpmyadmin
Self-XSS due to unescaped HTML output in import.
2014-02-15 00:00:00
freebsd
freebsd
phpMyAdmin -- Self-XSS due to unescaped HTML output in import.
2014-02-15 00:00:00
mageia
mageia
Updated phpseclib and phpmyadmin packages fix security vulnerability
2014-02-26 01:49:46
debiancve
debiancve
CVE-2014-1879
2014-02-20 15:27:09
prion
prion
Cross site scripting
2014-02-20 15:27:00
cvelist
cvelist
CVE-2014-1879
2014-02-20 11:00:00
securityvulns
securityvulns
[ MDVSA-2014:046 ] phpmyadmin
2014-05-05 00:00:00
osv
osv
phpmyadmin - security update
2014-07-09 00:00:00
debian
debian
[SECURITY] [DSA 2975-1] phpmyadmin security update
2014-07-09 18:45:33
fedora
fedora
[SECURITY] Fedora 19 Update: phpMyAdmin-4.2.6-1.fc19
2014-07-30 07:02:40
[SECURITY] Fedora 20 Update: phpMyAdmin-4.2.6-1.fc20
2014-07-30 07:01:17
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
51.5%
Related for NVD:CVE-2014-1879