Lucene search
+L

6332 matches found

OSV
OSV
•added 2014/02/20 3:27 p.m.•12 views

CVE-2014-1879

Cross-site scripting XSS vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action...

5AI score
SaveExploits0References5
OSV
OSV
•added 2014/02/20 3:27 p.m.•10 views

UBUNTU-CVE-2014-1879

Cross-site scripting XSS vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action...

3.5CVSS7.4AI score0.00967EPSS
SaveExploits1References4
Prion
Prion
•added 2014/02/20 3:27 p.m.•29 views

Cross site scripting

Cross-site scripting XSS vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action...

3.5CVSS5.5AI score0.00967EPSS
SaveExploits1References5Affected Software1
UbuntuCve
UbuntuCve
•added 2014/02/20 3:27 p.m.•29 views

CVE-2014-1879

Cross-site scripting XSS vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action...

3.5CVSS7.3AI score0.00967EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2014/02/20 11:00 a.m.•40 views

CVE-2014-1879

Cross-site scripting XSS vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action...

3.5CVSS5.2AI score0.00967EPSS
SaveExploits1
CVE
CVE
•added 2014/02/20 11:00 a.m.•100 views

CVE-2014-1879

CVE-2014-1879 concerns phpMyAdmin prior to 4.1.7, where an XSS vulnerability exists in the import.php action. The issue arises from how a crafted filename in an import action is processed, enabling a remote authenticated user to inject arbitrary web script or HTML. The vulnerability affects phpMy...

3.5CVSS5AI score0.00967EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2014/02/20 11:00 a.m.•32 views

CVE-2014-1879

Cross-site scripting XSS vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action...

4.9AI score0.00967EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/02/20 12:00 a.m.•3 views

CVE-2014-1879: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action...

3.5CVSS5.9AI score0.00967EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2014/02/17 12:00 a.m.•42 views

FreeBSD : phpMyAdmin -- Self-XSS due to unescaped HTML output in import. (0871d18b-9638-11e3-a371-6805ca0b3d42)

The phpMyAdmin development team reports : When importing a file with crafted filename, it is possible to trigger an XSS. We consider this vulnerability to be non critical. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

3.5CVSS8.1AI score0.00967EPSS
SaveExploits1References3
FreeBSD
FreeBSD
•added 2014/02/15 12:00 a.m.•45 views

phpMyAdmin -- Self-XSS due to unescaped HTML output in import.

The phpMyAdmin development team reports: When importing a file with crafted filename, it is possible to trigger an XSS. We consider this vulnerability to be non critical...

3.5CVSS6.4AI score0.00967EPSS
SaveExploits1References1
phpMyAdmin
phpMyAdmin
•added 2014/02/15 12:00 a.m.•50 views

Self-XSS due to unescaped HTML output in import.

PMASA-2014-1 Announcement-ID: PMASA-2014-1 Date: 2014-02-15 Summary Self-XSS due to unescaped HTML output in import. Description When importing a file with crafted filename, it is possible to trigger an XSS. Severity We consider this vulnerability to be non critical. Mitigation factor This...

3.5CVSS7.2AI score0.00967EPSS
SaveExploits1Affected Software1
Check Point Advisories
Check Point Advisories
•added 2014/02/03 12:00 a.m.•25 views

phpMYAdmin goto Parameter PHP Code Execution - Ver2 (CVE-2001-0478)

A code execution vulnerability has been reported in phpMYAdmin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5AI score0.04819EPSS
SaveExploits0
Metasploit
Metasploit
•added 2014/01/30 12:00 a.m.•31 views

Zpanel Remote Unauthenticated RCE

This module exploits an information disclosure vulnerability in ZPanel. The vulnerability is due to a vulnerable version of pChart used by ZPanel that allows unauthenticated users to read arbitrary files remotely on the file system. This particular module utilizes this vulnerability to identify t...

9.3CVSS8AI score0.26047EPSS
SaveExploits6
Check Point Advisories
Check Point Advisories
•added 2014/01/07 12:00 a.m.•22 views

phpMYAdmin goto Parameter PHP Code Execution - Ver2 (CVE-2001-0478)

A code execution vulnerability has been reported in phpMYAdmin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS7.5AI score0.04819EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2013/11/19 12:00 a.m.•24 views

SuSE Update for update openSUSE-SU-2013:1343-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201313431.nasl 8509 2018-01-24 06:57:46Z teissa $ SuSE Update for update openSUSE-SU-2013:1343-1 update Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program ...

4.3CVSS6.2AI score0.02276EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2013/11/19 12:00 a.m.•26 views

openSUSE: Security Advisory for update (openSUSE-SU-2013:1343-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS7AI score0.02276EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2013/11/18 12:00 a.m.•13 views

Fedora Update for phpMyAdmin FEDORA-2013-18794

Check for the Version of phpMyAdmin OpenVAS Vulnerability Test Fedora Update for phpMyAdmin FEDORA-2013-18794 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

7.4AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2013/11/18 12:00 a.m.•9 views

Fedora 20 : phpMyAdmin-3.5.8.2-1.fc20 (2013-18705)

Security update for PMASA-2013-8, PMASA-2013-9, PMASA-2013-11, PMASA-2013-12 PMASA-2013-14 and PMASA-2013-15 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

5.4AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2013/11/18 12:00 a.m.•14 views

Fedora Update for phpMyAdmin FEDORA-2013-18802

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2013/11/18 12:00 a.m.•16 views

Fedora 18 : phpMyAdmin-3.5.8.2-1.fc18 (2013-18802)

Security update for PMASA-2013-8, PMASA-2013-9, PMASA-2013-11, PMASA-2013-12 PMASA-2013-14 and PMASA-2013-15 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

5.4AI score
SaveExploits0References1
Rows per page
Query Builder