PT-2013-5326 · Phpmyadmin · Phpmyadmin

0X721427D8

·

CVE-2013-5002

·

Published

2013-07-29

·

Updated

2024-06-15

CVSS v2.0

3.5

Low

VectorAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.5.x through 3.5.8.1 phpMyAdmin versions 4.0.x through 4.0.4.1
Description A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted pageNumber value to "schema export.php".
Recommendations For phpMyAdmin versions 3.5.x through 3.5.8.1, update to version 3.5.8.2 or later. For phpMyAdmin versions 4.0.x through 4.0.4.1, update to version 4.0.4.2 or later.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-5002
DSA-2975-1
GHSA-P632-5W74-X8XX
MGASA-2013-0238
OPENSUSE-SU-2024:10054-1

Affected Products

Phpmyadmin