Search for vulnerabilities
Vulnerability details: VCID-723p-c3ak-myfz
Vulnerability ID VCID-723p-c3ak-myfz
Aliases CVE-2011-3592
GHSA-5p69-rmx8-7gw7
Summary phpMyAdmin Multiple XSS Vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in the `PMA_unInlineEditRow` function in js/sql.js in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a (1) database name, (2) table name, or (3) column name that is not properly handled after an inline-editing operation.
Status Published
Exploitability 0.5
Weighted Severity 2.7
Risk 1.4
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
epss 0.0018 https://api.first.org/data/v1/epss?cve=CVE-2011-3592
generic_textual LOW https://bugzilla.redhat.com/show_bug.cgi?id=738681
cvssv3.1_qr LOW https://github.com/advisories/GHSA-5p69-rmx8-7gw7
generic_textual LOW https://github.com/phpmyadmin/composer
generic_textual LOW https://github.com/phpmyadmin/phpmyadmin/commit/2f28ce9c800274190418da0945ce3647d36e1db6
generic_textual LOW https://github.com/phpmyadmin/phpmyadmin/commit/bda213c58aec44925be661acb0e76c19483ea170
generic_textual LOW https://nvd.nist.gov/vuln/detail/CVE-2011-3592
generic_textual LOW http://www.openwall.com/lists/oss-security/2011/09/30/8
generic_textual LOW http://www.phpmyadmin.net/home_page/security/PMASA-2011-14.php
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2011-3592
https://bugzilla.redhat.com/show_bug.cgi?id=738681
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3592
https://github.com/phpmyadmin/composer
https://github.com/phpmyadmin/phpmyadmin/commit/2f28ce9c800274190418da0945ce3647d36e1db6
https://github.com/phpmyadmin/phpmyadmin/commit/bda213c58aec44925be661acb0e76c19483ea170
https://nvd.nist.gov/vuln/detail/CVE-2011-3592
http://www.openwall.com/lists/oss-security/2011/09/30/8
http://www.phpmyadmin.net/home_page/security/PMASA-2011-14.php
GHSA-5p69-rmx8-7gw7 https://github.com/advisories/GHSA-5p69-rmx8-7gw7
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.40077
EPSS Score 0.0018
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T09:08:46.146074+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-5p69-rmx8-7gw7/GHSA-5p69-rmx8-7gw7.json 37.0.0