phpmyadmin/composer · Security
phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities
- GHSA ID
- GHSA-5gh4-v2ch-pcx4
- CVE ID
- CVE-2013-4997
- Severity
- medium
- Published
- Updated
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in (1) an anchor identifier to setup/index.php or (2) a chartTitle (aka chart title) value.
CWEs
- CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')