Description

Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action.

Remediation

References

CVE-2014-1879

Related Vulnerabilities

WordPress Plugin Advanced Dynamic Pricing for WooCommerce Multiple Vulnerabilities (4.1.5)

WordPress Plugin ResAds Multiple Cross-Site Scripting Vulnerabilities (1.0.1)

Oracle Database Server CVE-2011-0785 Vulnerability (CVE-2011-0785)

WordPress 3.1.3 Multiple SQL Injection Vulnerabilities (3.1 - 3.1.3)

WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Arbitrary File Upload (3.4.3)

Severity

Low

Classification

CVE-2014-1879 CWE-707

Tags

Missing Update Known Vulnerabilities