Server side cross-site scripting In phpmyadmin
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a crafted database name, (2) a crafted user name, (3) a crafted logo URL in the navigation panel, (4) a crafted entry in a certain proxy list, or (5) crafted content in a version.json file.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 13 | 4:4.0.4.2-1 | ||
debian 11 | 4:4.0.4.2-1 | ||
debian 12 | 4:4.0.4.2-1 | ||
debian 14 | 4:4.0.4.2-1 |
Aliases
1. 2. 3. 4. 5.