Server side cross-site scripting In phpmyadmin
Description
XSS issues were discovered in phpMyAdmin. This affects navigation pane and database/table hiding feature (a specially-crafted database name can be used to trigger an XSS attack); the "Tracking" feature (a specially-crafted query can be used to trigger an XSS attack); and GIS visualization feature. All 4.6.x versions (prior to 4.6.4) and 4.4.x versions (prior to 4.4.15.8) are affected.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.2 | 4.4.15.8-r0 | ||
 debian 13 | 4:4.6.4+dfsg1-1 | ||
debian 12 | 4:4.6.4+dfsg1-1 | ||
debian 14 | 4:4.6.4+dfsg1-1 |
Aliases
1. 2. 3. 4. 5. 6. 7.