Search for packages
| purl | pkg:composer/phpmyadmin/phpmyadmin@3.5.0 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1dhd-3ayw-6kg3
Aliases: CVE-2013-4997 GHSA-5gh4-v2ch-pcx4 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in (1) an anchor identifier to setup/index.php or (2) a chartTitle (aka chart title) value. |
Affected by 0 other vulnerabilities. |
|
VCID-2n2q-cm1n-cqdr
Aliases: CVE-2013-3239 GHSA-gg36-9346-9qx9 |
Multiple vulnerabilities have been found in phpMyAdmin, allowing remote authenticated attackers to execute arbitrary code, inject SQL code or conduct other attacks. |
Affected by 0 other vulnerabilities. |
|
VCID-46c2-r8g1-13ez
Aliases: CVE-2012-4345 GHSA-r3pq-mp8v-cp33 |
phpMyAdmin Multiple Cross-site Scripting Vulnerabilities in the Database Structure page Multiple cross-site scripting (XSS) vulnerabilities in the Database Structure page in phpMyAdmin 3.4.x before 3.4.11.1 and 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) a crafted table name during table creation, or a (2) Empty link or (3) Drop link for a crafted table name. |
Affected by 0 other vulnerabilities. |
|
VCID-5288-gx4v-7bh4
Aliases: CVE-2012-5368 GHSA-xpxp-v33m-5jp9 |
phpMyAdmin Unsafe Fetching of Javascript Code phpMyAdmin 3.5.x before 3.5.3 uses JavaScript code that is obtained through an HTTP session to phpmyadmin.net without SSL, which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by modifying this code. |
Affected by 0 other vulnerabilities. |
|
VCID-dby9-xw23-huf5
Aliases: CVE-2012-4579 GHSA-q7v2-w38r-pv7v |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via a Table Operations (1) TRUNCATE or (2) DROP link for a crafted table name, (3) the Add Trigger popup within a Triggers page that references crafted table names, (4) an invalid trigger-creation attempt for a crafted table name, (5) crafted data in a table, or (6) a crafted tooltip label name during GIS data visualization, a different issue than CVE-2012-4345. |
Affected by 0 other vulnerabilities. |
|
VCID-kke6-fqmn-pug2
Aliases: CVE-2012-5339 GHSA-rfpg-2fp8-2fph |
phpMyAdmin multiple cross-site scripting vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted name of (1) an event, (2) a procedure, or (3) a trigger. |
Affected by 0 other vulnerabilities. |
|
VCID-q2be-73wp-tbav
Aliases: CVE-2013-5002 GHSA-p632-5w74-x8xx |
Multiple vulnerabilities have been found in phpMyAdmin, allowing remote authenticated attackers to execute arbitrary code, inject SQL code or conduct other attacks. |
Affected by 0 other vulnerabilities. Affected by 18 other vulnerabilities. Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||