~ / search / GHSA-5pvv-f8h3-gw96

GHSA-5pvv-f8h3-gw96

phpMyAdmin Cross-site Scripting In MySQL Table Name

Source: GitHub Advisory Database (reviewed) Moderate CVE-2009-3696

Packages

EcosystemPackageAffectedFixed in
Packagist phpmyadmin/phpmyadmin >= 2.11.0, < 2.11.9.6 2.11.9.6
Packagist phpmyadmin/phpmyadmin >= 3.0.0, < 3.2.2.1 3.2.2.1

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.

References

External links from the advisory. They lead to third-party sites.