CVE-2013-5001: XSS

Published Jul 30, 2013

Updated

Cross-site scripting (XSS) vulnerability in libraries/plugins/transformations/abstract/TextLinkTransformationsPlugin.class.php in phpMyAdmin 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted object name associated with a TextLinkTransformationPlugin link.

Affected Software

8 affected components

phpMyAdmin phpMyAdmin=4.0.0

phpMyAdmin phpMyAdmin=4.0.0-rc2

phpMyAdmin phpMyAdmin=4.0.0-rc3

phpMyAdmin phpMyAdmin=4.0.1

phpMyAdmin phpMyAdmin=4.0.2

phpMyAdmin phpMyAdmin=4.0.3

phpMyAdmin phpMyAdmin=4.0.4

phpMyAdmin phpMyAdmin=4.0.4.1

Event History

Jul 30, 2013

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-5001?

CVE-2013-5001 has a medium severity rating due to its potential for exploitation through cross-site scripting.

How do I fix CVE-2013-5001?

To fix CVE-2013-5001, upgrade to phpMyAdmin version 4.0.4.2 or later.

What kind of vulnerability is CVE-2013-5001?

CVE-2013-5001 is a cross-site scripting (XSS) vulnerability affecting certain versions of phpMyAdmin.

Who is affected by CVE-2013-5001?

CVE-2013-5001 affects remote authenticated users of phpMyAdmin versions 4.0.x before 4.0.4.2.

What can attackers achieve through CVE-2013-5001?

Attackers can inject arbitrary web scripts or HTML into the phpMyAdmin interface through this vulnerability.