CVE-2014-4349

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2014-4349
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2014-4349.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2014-4349
Related
Published
2014-06-25T11:19:22Z
Modified
2024-06-04T04:00:19Z
Summary
[none]
Details

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.1.x before 4.1.14.1 and 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name that is improperly handled after a (1) hide or (2) unhide action.

References

Affected packages

Debian:11 / phpmyadmin

Package

Name
phpmyadmin
Purl
pkg:deb/debian/phpmyadmin?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4:4.2.5-1

Ecosystem specific 

{
    "urgency": "low"
}

Debian:12 / phpmyadmin

Package

Name
phpmyadmin
Purl
pkg:deb/debian/phpmyadmin?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4:4.2.5-1

Ecosystem specific 

{
    "urgency": "low"
}

Debian:13 / phpmyadmin

Package

Name
phpmyadmin
Purl
pkg:deb/debian/phpmyadmin?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4:4.2.5-1

Ecosystem specific 

{
    "urgency": "low"
}