CVE-2013-5002: XSS
Cross-site scripting (XSS) vulnerability in libraries/schema/ExportRelationSchema.class.php in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted pageNumber value to schemaexport.php.
Other sources
Cross-site scripting (XSS) vulnerability in libraries/schema/ExportRelationSchema.class.php in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted pageNumber value to schemaexport.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5002?
CVE-2013-5002 is classified as a moderate severity vulnerability due to its ability to allow cross-site scripting (XSS) attacks.
How do I fix CVE-2013-5002?
To mitigate CVE-2013-5002, upgrade your phpMyAdmin to versions 3.5.8.2 or 4.0.4.2 or later.
What versions of phpMyAdmin are affected by CVE-2013-5002?
CVE-2013-5002 affects phpMyAdmin versions 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2.
Can CVE-2013-5002 be exploited by unauthenticated users?
CVE-2013-5002 can only be exploited by remote authenticated users, making it less accessible for general attackers.
What are the implications of CVE-2013-5002 for my web application?
If exploited, CVE-2013-5002 could allow attackers to inject arbitrary web scripts or HTML into your application, leading to potential data theft or session hijacking.