CVE-2014-4349

EPSS 0.35%

發布日:2014/6/25修改日:2026/5/7

也稱為:DEBIAN-CVE-2014-4349

描述

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.1.x before 4.1.14.1 and 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name that is improperly handled after a (1) hide or (2) unhide action.

受影響套件(1)

Debian/phpmyadminfrom 0, < 4:4.2.5-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-4349