Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in tblgisvisualization.php in phpMyAdmin 3.5.x before 3.5.8 might allow remote attackers to inject arbitrary web script or HTML via the 1 visualizationSettingswidth or 2 visualizationSettingsheight parameter. NOTE: a third party reports that this ...

CVE-2013-1937

CVE-2013-1937 corresponds to multiple Cross-Site Scripting (XSS) vulnerabilities in phpMyAdmin. The public advisory notes an XSS flaw in tbl_gis_visualization.php within phpMyAdmin 3.5.x before 3.5.8, exploitable via the visualizationSettings[width] or visualizationSettings[height] parameters, po...

phpMyAdmin 3.5.7 Cross Site Scripting Vulnerability

phpMyAdmin version 3.5.7 suffers from a reflective cross site scripting vulnerability. Reflected XSS in phpMyAdmin 3.5.7 ==================================================== Author: Janek Vind "waraxe" Date: 09. April 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-102.html...