GHSA-5p69-rmx8-7gw7

Suggest an improvement
Source
https://github.com/advisories/GHSA-5p69-rmx8-7gw7
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-5p69-rmx8-7gw7/GHSA-5p69-rmx8-7gw7.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-5p69-rmx8-7gw7
Aliases
  • CVE-2011-3592
Published
2022-05-17T04:19:07Z
Modified
2024-01-15T18:11:47.040538Z
Summary
phpMyAdmin Multiple XSS Vulnerabilities
Details

Multiple cross-site scripting (XSS) vulnerabilities in the PMA_unInlineEditRow function in js/sql.js in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a (1) database name, (2) table name, or (3) column name that is not properly handled after an inline-editing operation.

References

Affected packages

Packagist / phpmyadmin/phpmyadmin

Package

Name
phpmyadmin/phpmyadmin
Purl
pkg:composer/phpmyadmin/phpmyadmin

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.4.0
Fixed
3.4.5