Description

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.1.x before 4.1.14.1 and 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name that is improperly handled after a (1) hide or (2) unhide action.

Remediation

References

CVE-2014-4349

Related Vulnerabilities

WordPress Plugin Foliopress WYSIWYG Cross-Site Scripting (2.6.8.4)

WordPress Plugin Custom Background 'uploadify.php' Arbitrary File Upload (1.01)

Werkzeug WSGI Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-14322)

WordPress Plugin Banner Effect Header Cross-Site Request Forgery (1.2.6)

Ampache Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-4665)

Severity

Low

Classification

CVE-2014-4349 CWE-707

Tags

Missing Update Known Vulnerabilities