CVE-2014-4954

Cross-site scripting XSS vulnerability in the PMAgetHtmlForActionLinks function in libraries/structure.lib.php in phpMyAdmin 4.2.x before 4.2.6 allows remote authenticated users to inject arbitrary web script or HTML via a crafted table comment that is improperly handled during construction of a...

PT-2014-6228

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.2.x through 4.2.5 Description A cross-site scripting XSS issue exists due to improper handling of crafted table comments during the construction of a database structure page. This allows remote authenticated users to inje...

CVE-2014-4954: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the PMAgetHtmlForActionLinks function in libraries/structure.lib.php in phpMyAdmin 4.2.x before 4.2.6 allows remote authenticated users to inject arbitrary web script or HTML via a crafted table comment that is improperly handled during construction of a...