CVE-2011-4634

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.8 allow remote attackers to inject arbitrary web script or HTML via (1) a…

published December 22, 2011

CVSS
—
EPSS
2%
Percentile
81.7
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.8 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted database name, related to the Database Synchronize panel; (2) a crafted database name, related to the Database rename panel; (3) a crafted SQL query, related to the table overview panel; (4) a crafted SQL query, related to the view creation dialog; (5) a crafted column type, related to the table search dialog; or (6) a crafted column type, related to the create index dialog.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02129 · 81.7th percentile
Published
2011-12-22T20:00Z
EPSS history
Timeline
  • 22 DEC 20:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.8 allow remote attackers to inject arbitrary web script or HTML via (1) a…
    cvelistv5