Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2022/05/17 3:43 a.m.27 views

phpMyAdmin Cryptographic Vulnerability

The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies on the Math.random JavaScript function, which makes it easier for remote attackers to guess passwords via a brute-force approach...

7.5CVSS7.3AI score0.00628EPSS
Exploits0References14Affected Software1
OpenVAS
OpenVAS
added 2017/08/21 12:0 a.m.37 views

phpMyAdmin XSS Vulnerability (PMASA-2014-9) - Linux

phpMyAdmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

3.5CVSS5.7AI score0.00219EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2014/12/26 2:59 a.m.17 views

CVE-2011-3591

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row that triggers an improperly constructed confirmation message after inline-editing and save operations, related to 1...

3.5CVSS5.9AI score0.0018EPSS
Exploits0References2
CVE
CVE
added 2014/12/26 2:0 a.m.50 views

CVE-2011-3591

CVE-2011-3591 describes multiple XSS vulnerabilities in phpMyAdmin 3.4.x before 3.4.5. An authenticated user can inject arbitrary script/HTML via a crafted row that triggers an improperly constructed confirmation message after inline editing and save operations, related to the files js/functions....

3.5CVSS5.3AI score0.0018EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2014/12/26 2:0 a.m.19 views

CVE-2011-3591

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row that triggers an improperly constructed confirmation message after inline-editing and save operations, related to 1...

5.2AI score0.0018EPSS
Exploits0References4
NVD
NVD
added 2014/08/22 1:55 a.m.20 views

CVE-2014-5274

Cross-site scripting XSS vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js...

3.5CVSS5AI score0.00219EPSS
Exploits1References4
Rows per page
Query Builder