Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted Host HTTP header, related to libraries/Config.class.php; (2) crafted JSON data, related to fileecho.php; (3) a crafted SQL query, related to js/functions.js; (4) the initial parameter to libraries/serverprivileges.lib.php in the user accounts page; or (5) the it parameter to libraries/controllers/TableSearchController.class.php in the zoom search page.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "4.0.0"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.2"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.3"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.4"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.4.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.4.2"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.5"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.6"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.7"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.8"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.9"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.10"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.10.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.10.2"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.10.3"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.10.4"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.10.5"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.10.6"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.10.7"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.10.8"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.10.9"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.10.10"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.10.11"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.10.12"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.10.13"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.10.14"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.0"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.1.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.2"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.3"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.4"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.5"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.6"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.6.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.7"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.8"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.9"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.10"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.11"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.12"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.13"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.13.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.14"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.14.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.15"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.15.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.15.2"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.15.3"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.15.4"
},
{
"introduced": "0"
},
{
"last_affected": "4.5.0"
},
{
"introduced": "0"
},
{
"last_affected": "4.5.0-rc1"
},
{
"introduced": "0"
},
{
"last_affected": "4.5.0.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.5.0.2"
},
{
"introduced": "0"
},
{
"last_affected": "4.5.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.5.2"
},
{
"introduced": "0"
},
{
"last_affected": "4.5.3"
},
{
"introduced": "0"
},
{
"last_affected": "4.5.3.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.5.4"
},
{
"introduced": "0"
},
{
"last_affected": "4.5.4.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.5.5"
}
]
}