2 matches found
GHSA-MWM8-36C5-J5CF phpMyAdmin Cross-site scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in examples/openid.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving an OpenID error message...
6.1CVSS6.8AI score0.01754EPSS
SaveExploits0References13
CVE-2016-5731
CVE-2016-5731 is a cross‑site scripting (XSS) vulnerability in the phpMyAdmin OpenID authentication flow. The issue affects phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3, where an OpenID error message can be manipulated to inject arbitrary web script or HTML via...
6.1CVSS6.7AI score0.01754EPSS
SaveExploits0References7Affected Software1
20