Description

Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.

Remediation

References

CVE-2009-3696

Related Vulnerabilities

WordPress Plugin Super CAPTCHA 'admin.php' SQL Injection (2.2.4)

Jenkins Passwords transmitted in plain text (CVE-2020-2251)

WordPress Plugin Coming Soon Possible Remote Code Execution (1.1.3)

Apache Traffic Server Other Vulnerability (CVE-2019-9513)

TYPO3 Deserialization of Untrusted Data Vulnerability (CVE-2019-19849)

Severity

Medium

Classification

CVE-2009-3696 CWE-707

Tags

Missing Update Known Vulnerabilities