Search for vulnerabilities
Vulnerability details: VCID-4r9b-k2zk-1kb1
Vulnerability ID VCID-4r9b-k2zk-1kb1
Aliases CVE-2014-8326
GHSA-pvr5-84gr-g985
Summary phpMyAdmin Implementation XSS Vulnerability on Server Monitor Page Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database name or (2) table name, related to the `libraries/DatabaseInterface.class.php` code for SQL debug output and the `js/server_status_monitor.js` code for the server monitor page.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
generic_textual MODERATE http://lists.opensuse.org/opensuse-updates/2014-11/msg00004.html
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
epss 0.00269 https://api.first.org/data/v1/epss?cve=CVE-2014-8326
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-pvr5-84gr-g985
generic_textual MODERATE https://github.com/phpmyadmin/phpmyadmin/commit/7b8962dede7631298c81e2c1cd267b81f1e08a8c
generic_textual MODERATE https://github.com/phpmyadmin/phpmyadmin/commit/bd68c54d1beeef79d237e8bfda44690834012a76
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2014-8326
generic_textual MODERATE https://web.archive.org/web/20200228163625/http://www.securityfocus.com/bid/70731
generic_textual MODERATE http://www.phpmyadmin.net/home_page/security/PMASA-2014-12.php
Reference id Reference type URL
http://lists.opensuse.org/opensuse-updates/2014-11/msg00004.html
https://api.first.org/data/v1/epss?cve=CVE-2014-8326
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8326
https://github.com/phpmyadmin/phpmyadmin/commit/7b8962dede7631298c81e2c1cd267b81f1e08a8c
https://github.com/phpmyadmin/phpmyadmin/commit/bd68c54d1beeef79d237e8bfda44690834012a76
https://nvd.nist.gov/vuln/detail/CVE-2014-8326
https://web.archive.org/web/20200228163625/http://www.securityfocus.com/bid/70731
http://www.phpmyadmin.net/home_page/security/PMASA-2014-12.php
GHSA-pvr5-84gr-g985 https://github.com/advisories/GHSA-pvr5-84gr-g985
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.50205
EPSS Score 0.00269
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T09:06:07.916173+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-pvr5-84gr-g985/GHSA-pvr5-84gr-g985.json 37.0.0