medium4.3
CVE-2013-4997
phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities
Impact
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in (1) an anchor identifier to setup/index.php or (2) a chartTitle (aka chart title) value.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | phpmyadmin/phpmyadmin | >= 3.5, < 3.5.8.2 | 3.5.8.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmyadmin | Phpmyadmin | Versions 3.5.0.0, 3.5.1.0, 3.5.2.0, 3.5.2.1, 3.5.2.2, 3.5.3.0 |