Lucene search
K

13 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:27 a.m.1 views

SUSE CVE-2014-5274

Cross-site scripting XSS vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js...

3.5CVSS5.8AI score0.00219EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/05/14 2:5 a.m.26 views

phpMyAdmin cross-site scripting vulnerability in crafted view name

A cross-site scripting XSS vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js...

3.5CVSS5.3AI score0.00219EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2022/05/14 2:5 a.m.34 views

GHSA-Q586-XPWR-JC3J phpMyAdmin cross-site scripting vulnerability in crafted view name

A cross-site scripting XSS vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js...

3.5CVSS5.6AI score0.00219EPSS
Exploits1References4
NVD
NVD
added 2017/11/05 5:29 p.m.14 views

CVE-2017-16543

Zoho ManageEngine Applications Manager 13 before build 13500 allows SQL injection via GraphicalView.do, as demonstrated by a crafted viewProps yCanvas field or viewid parameter...

9.8CVSS9.8AI score0.01933EPSS
Exploits3References3
OpenVAS
OpenVAS
added 2017/08/21 12:0 a.m.37 views

phpMyAdmin XSS Vulnerability (PMASA-2014-9) - Linux

phpMyAdmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

3.5CVSS5.7AI score0.00219EPSS
Exploits1References1
NVD
NVD
added 2014/08/22 1:55 a.m.20 views

CVE-2014-5274

Cross-site scripting XSS vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js...

3.5CVSS5AI score0.00219EPSS
Exploits1References4
OSV
OSV
added 2014/08/22 1:55 a.m.1 views

DEBIAN-CVE-2014-5274

Cross-site scripting XSS vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js...

3.5CVSS7.7AI score0.00219EPSS
Exploits1References1
OSV
OSV
added 2014/08/22 1:55 a.m.0 views

UBUNTU-CVE-2014-5274

Cross-site scripting XSS vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js...

3.5CVSS7.4AI score0.00219EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2014/08/22 1:55 a.m.26 views

CVE-2014-5274

Cross-site scripting XSS vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js...

3.5CVSS7.3AI score0.00219EPSS
Exploits1References2
Cvelist
Cvelist
added 2014/08/22 1:0 a.m.21 views

CVE-2014-5274

Cross-site scripting XSS vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js...

4.9AI score0.00219EPSS
Exploits1References4
phpMyAdmin
phpMyAdmin
added 2014/08/17 12:0 a.m.41 views

XSS in view operations page.

PMASA-2014-9 Announcement-ID: PMASA-2014-9 Date: 2014-08-17 Summary XSS in view operations page. Description With a crafted view name it is possible to trigger an XSS when dropping the view in view operation page. Severity We consider this vulnerability to be non critical. Mitigation factor This...

3.5CVSS7.2AI score0.00219EPSS
Exploits1Affected Software1
NVD
NVD
added 2006/04/11 10:2 a.m.15 views

CVE-2006-1705

Oracle Database 9.2.0.0 to 10.2.0.3 allows local users with "SELECT" privileges for a base table to insert, update, or delete data by creating a crafted view then performing the operations on that view...

2.1CVSS6AI score0.01113EPSS
Exploits0References9
Cvelist
Cvelist
added 2006/04/11 10:0 a.m.18 views

CVE-2006-1705

Oracle Database 9.2.0.0 to 10.2.0.3 allows local users with "SELECT" privileges for a base table to insert, update, or delete data by creating a crafted view then performing the operations on that view...

6AI score0.01113EPSS
Exploits0References9
Rows per page
Query Builder