Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) server-privileges certificate data fields on the user privileges page, (2) an "invalid JSON" error message in the error console, (3) a database name in the central columns implementation, (4) a group name, or (5) a search name in the bookmarks implementation.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "4.6.0"
},
{
"introduced": "0"
},
{
"last_affected": "4.6.0-alpha1"
},
{
"introduced": "0"
},
{
"last_affected": "4.6.0-rc1"
},
{
"introduced": "0"
},
{
"last_affected": "4.6.0-rc2"
},
{
"introduced": "0"
},
{
"last_affected": "4.6.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.6.2"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.0"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.1.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.2"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.3"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.4"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.5"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.6"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.6.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.7"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.8"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.9"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.10"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.11"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.12"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.13"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.13.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.14.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.15"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.15.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.15.2"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.15.3"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.15.4"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.15.5"
},
{
"introduced": "0"
},
{
"last_affected": "4.4.15.6"
}
]
}[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "42.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.2"
}
]
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5705.json"