CVE-2014-5274

EPSS 0.22%

phpMyAdmin cross-site scripting vulnerability in crafted view name

發布日:2022/5/14修改日:2026/5/7

也稱為:GHSA-q586-xpwr-jc3jDEBIAN-CVE-2014-5274

描述

Cross-site scripting (XSS) vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js.

受影響套件(2)

Debian/phpmyadminfrom 0, < 4:4.2.7.1-1
Packagist/phpmyadmin/phpmyadmin>= 4.1.0, < 4.1.14.3

參考連結(5)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2014-5274
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-5274
WEBhttp://lists.opensuse.org/opensuse-updates/2014-08/msg00045.html
WEBhttps://github.com/phpmyadmin/phpmyadmin/commit/0cd293f5e13aa245e4a57b8d373597cc0e421b6f
WEBhttp://www.phpmyadmin.net/home_page/security/PMASA-2014-9.php