pma-power.com XSS vulnerability

Open Bug Bounty ID: OBB-688428 Description| Value ---|--- Affected Website:| pma-power.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Ian Dunn: unchecked unserialize usages in audit-trail-extension/audit-trail-extension.php

in: https://github.com/iandunn/audit-trail-extension/blob/master/audit-trail-extension.phpL106 https://github.com/iandunn/audit-trail-extension/blob/master/audit-trail-extension.phpL112 https://github.com/iandunn/audit-trail-extension/blob/master/audit-trail-extension.phpL133...

PT-2014-8760

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.5 phpMyAdmin versions 4.1.x through 4.1.14.6 phpMyAdmin versions 4.2.x through 4.2.12 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via various crafted...

PT-2014-6229

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.0 phpMyAdmin versions 4.1.x through 4.1.14.1 phpMyAdmin versions 4.2.x through 4.2.5 Description The issue is related to a cross-site scripting XSS vulnerability in the PMA TRI getRowForList function...

PT-2016-7858

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.17 phpMyAdmin versions 4.4.x through 4.4.15.8 phpMyAdmin versions 4.6.x through 4.6.4 Description An issue was discovered due to a bug in serialized string parsing, allowing bypass of the protection...

PT-2012-5985

Name of the Vulnerable Software and Affected Versions Portable phpMyAdmin plugin versions prior to 1.3.1 Description The issue allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to the 'wp-content/plugins/portable-phpmyadmin/wp-pma-mod'...

CVE-2012-5469: Undefined Security Weakness

The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to wp-content/plugins/portable-phpmyadmin/wp-pma-mod...

PT-2011-2795

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 2.11.x through 2.11.11.2 phpMyAdmin versions 3.3.x through 3.3.9.1 Description The issue is related to the PMA Bookmark get function in phpMyAdmin, which does not properly restrict bookmark queries. This makes it easier for...

PT-2010-5421

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 2.11.x through 2.11.11.0 phpMyAdmin versions 3.x through 3.3.8.0 Description A cross-site scripting XSS issue exists in the PMA linkOrButton function, allowing remote attackers to inject arbitrary web script or HTML via a...

Fedora 9 : phpMyAdmin-3.0.1.1-1.fc9 (2008-9316)

This update by upstream to phpMyAdmin 3.0.1.1 solves CVE-2008-4775, a XSS issue in pmdpdf.php via db parameter when registerglobals is enabled. - GUI SQL error after sorting a subset - lang Catalan update - lang Russian update - import Temporary uploaded file not deleted - auth Cannot create...

phpMyAdmin: Insecure SQL script installation

Background phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL databases from a web-browser. phpMyAdmin uses a pma MySQL user to control the linked-tables infrastructure. The SQL install script sets the initial password for the pma user. Description The phpMyAdmin...

DEBIAN-CVE-2004-1055

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PmaAbsoluteUri parameter, 2 the zerorows parameter in readdump.php, 3 the confirm form, or 4 an error message generated by the internal...