Description

Multiple cross-site scripting (XSS) vulnerabilities in libraries/display_export.lib.php in phpMyAdmin 3.4.x before 3.4.9 allow remote attackers to inject arbitrary web script or HTML via crafted URL parameters, related to the export panels in the (1) server, (2) database, and (3) table sections.

Remediation

References

CVE-2011-4780

Related Vulnerabilities

Beego Framework Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-27116)

Handlebars Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-20922)

WordPress Plugin Genie WP Favicon Cross-Site Request Forgery (0.5.2)

WordPress Plugin Watu Quiz Cross-Site Scripting (3.3.9)

WordPress Plugin BetterDocs-Best Documentation & Knowledge Base Cross-Site Scripting (1.8.4)

Severity

Medium

Classification

CVE-2011-4780 CWE-707

Tags

Missing Update Known Vulnerabilities