CVE-2012-4579: XSS

Q: What is the severity of CVE-2012-4579?

CVE-2012-4579 is classified as a medium severity vulnerability due to its potential to allow XSS attacks.

Q: How do I fix CVE-2012-4579?

To fix CVE-2012-4579, upgrade to phpMyAdmin version 3.5.2.2 or later.

Q: Who is affected by CVE-2012-4579?

CVE-2012-4579 affects phpMyAdmin versions 3.5.x prior to 3.5.2.2.

Q: What types of attacks can CVE-2012-4579 enable?

CVE-2012-4579 can enable remote authenticated users to perform cross-site scripting (XSS) attacks.

Q: Can CVE-2012-4579 be exploited remotely?

Yes, CVE-2012-4579 can be exploited remotely by authenticated users.

Published Aug 21, 2012

Updated

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via a Table Operations (1) TRUNCATE or (2) DROP link for a crafted table name, (3) the Add Trigger popup within a Triggers page that references crafted table names, (4) an invalid trigger-creation attempt for a crafted table name, (5) crafted data in a table, or (6) a crafted tooltip label name during GIS data visualization, a different issue than CVE-2012-4345.

Affected Software

5 affected componentsFixes available

composer/phpmyadmin/phpmyadmin>=3.5<3.5.2.2

3.5.2.2

phpMyAdmin phpMyAdmin=3.5.0.0

phpMyAdmin phpMyAdmin=3.5.1.0

phpMyAdmin phpMyAdmin=3.5.2.0

phpMyAdmin phpMyAdmin=3.5.2.1

Remediation

Patch Available

http://www.phpmyadmin.net/home_page/security/PMASA-2012-4.php

Event History

Aug 21, 2012

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

May 17, 2022

Advisory Published

05:25 AM

Frequently Asked Questions

What is the severity of CVE-2012-4579?

CVE-2012-4579 is classified as a medium severity vulnerability due to its potential to allow XSS attacks.

How do I fix CVE-2012-4579?

To fix CVE-2012-4579, upgrade to phpMyAdmin version 3.5.2.2 or later.

Who is affected by CVE-2012-4579?