E3Amn2L

A weakness was discovered that allows an attacker to inject arbitrary values into the browser cookies. This issue is a re-issue of an incomplete fix from a previous problem.

An issue in phpMyAdmin allows it to display a PHP error message containing the full path of the directory where phpMyAdmin is installed when certain scripts are called in an unexpected way. Additionally, during an execution timeout in the export functionality, errors with the full path are written to the export file.

An issue in the table partitioning function allows for a Denial of Service (DoS) attack to be invoked with a very large request.

An issue in phpMyAdmin allows it to display a PHP error message containing the full path of the directory where phpMyAdmin is installed when certain scripts are called in an unexpected way. Additionally, during an execution timeout in the export functionality, errors with the full path are written to the export file.

An issue in phpMyAdmin allows it to display a PHP error message containing the full path of the directory where phpMyAdmin is installed when certain scripts are called in an unexpected way. Additionally, during an execution timeout in the export functionality, errors with the full path are written to the export file.

An issue was discovered that allows bypassing the logout timeout with a crafted request parameter value.

An issue in phpMyAdmin allows it to display a PHP error message containing the full path of the directory where phpMyAdmin is installed when certain scripts are called in an unexpected way. Additionally, during an execution timeout in the export functionality, errors with the full path are written to the export file.

An issue was discovered that allows injection of BBCode in the login page with a crafted login request.

An issue was discovered that allows a specially crafted database and/or table name to trigger an SQL injection attack through the export functionality.

XSS issues were discovered in phpMyAdmin, affecting the navigation pane and database/table hiding feature, the Tracking feature, and the GIS visualization feature. An attacker can trigger an XSS attack using a specially-crafted database name or query.

An issue was discovered in the "User group" and "Designer" features of phpMyAdmin, allowing a user to execute an SQL injection attack against the account of the control user.

XSS issues were discovered in the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack.

The issue allows remote attackers to bypass an intended SSRF protection mechanism via a crafted address, as WordPress does not consider octal and hexadecimal IP address formats when determining an intranet address.

A cross-site request forgery (CSRF) issue exists in the `wp ajax wp compression test` function, located in `wp-admin/includes/ajax-actions.php`, allowing remote attackers to hijack administrator authentication for requests that modify the script compression option.

A cross-site scripting (XSS) issue exists in the network settings page, allowing remote attackers to inject arbitrary web script or HTML.

The issue allows remote attackers to conduct cookie-attribute injection attacks via a crafted URI when the environment lacks a PHP SELF value.

The issue allows remote attackers to inject arbitrary web script or HTML via crafted table parameters in the partition-range implementation in the table-structure page. This is due to multiple cross-site scripting (XSS) vulnerabilities in the `templates/table/structure/display partitions.phtml` file.

The issue allows remote attackers to inject arbitrary web script or HTML via several vectors, including server-privileges certificate data fields on the user privileges page, an "invalid JSON" error message in the error console, a database name in the central columns implementation, a group name, or a search name in the bookmarks implementation.

The issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via several pages, including the database normalization page, which includes `normalization.php` or `js/normalization.js`, the database structure page, which includes `templates/database/structure/sortable header.phtml`, or the central columns page by manipulating the `pos` parameter to `db central columns.php`.

A cross-site scripting (XSS) issue exists in the SQL parser of phpMyAdmin, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted query. This is due to a vulnerability in the format function in libraries/sql-parser/src/Utils/Error.php.