CVE-2014-4348

EPSS 0.18%

發布日:2014/6/25修改日:2026/5/7

也稱為:DEBIAN-CVE-2014-4348

描述

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database name or (2) table name that is improperly handled after presence in (a) the favorite list or (b) recent tables.

受影響套件(1)

Debian/phpmyadminfrom 0, < 4:4.2.5-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-4348