CVE-2013-4997
CVE-2013-4997
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in (1) an anchor identifier to setup/index.php or (2) a chartTitle (aka chart title) value.
EPSS 1.5% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
phpmyadmin Debian:12
- Affected ranges
- ECOSYSTEM: < 4:4.0.4.2-1
Update to 4:4.0.4.2-1
phpmyadmin Debian:13
- Affected ranges
- ECOSYSTEM: < 4:4.0.4.2-1
Update to 4:4.0.4.2-1
phpmyadmin Debian:14
- Affected ranges
- ECOSYSTEM: < 4:4.0.4.2-1
Update to 4:4.0.4.2-1
phpmyadmin/phpmyadmin Packagist
- Affected ranges
- ECOSYSTEM: ≥ 3.5, < 3.5.8.2
Update to 3.5.8.2