CVE-2012-4345
CVE-2012-4345
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Multiple cross-site scripting (XSS) vulnerabilities in the Database Structure page in phpMyAdmin 3.4.x before 3.4.11.1 and 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) a crafted table name during table creation, or a (2) Empty link or (3) Drop link for a crafted table name.
EPSS 1.4% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
phpmyadmin Debian:12
- Affected ranges
- ECOSYSTEM: < 4:3.4.11.1-1
Update to 4:3.4.11.1-1
phpmyadmin Debian:13
- Affected ranges
- ECOSYSTEM: < 4:3.4.11.1-1
Update to 4:3.4.11.1-1
phpmyadmin Debian:14
- Affected ranges
- ECOSYSTEM: < 4:3.4.11.1-1
Update to 4:3.4.11.1-1
phpmyadmin/phpmyadmin Packagist
- Affected ranges
- ECOSYSTEM: ≥ 3.4, < 3.4.11.1
Update to 3.4.11.1
phpmyadmin/phpmyadmin Packagist
- Affected ranges
- ECOSYSTEM: ≥ 3.5, < 3.5.2.2
Update to 3.5.2.2