CVE-2014-4348: XSS
Published Jun 25, 2014
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database name or (2) table name that is improperly handled after presence in (a) the favorite list or (b) recent tables.
Affected Software
4 affected components
phpMyAdmin phpMyAdmin=4.2.0
phpMyAdmin phpMyAdmin=4.2.1
phpMyAdmin phpMyAdmin=4.2.2
phpMyAdmin phpMyAdmin=4.2.3
Remediation
Patch Available
Event History
Jun 25, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-4348?
CVE-2014-4348 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2014-4348?
To fix CVE-2014-4348, upgrade phpMyAdmin to version 4.2.4 or later.
3
Who is affected by CVE-2014-4348?
CVE-2014-4348 affects phpMyAdmin versions 4.2.0 through 4.2.3.
4
What types of vulnerabilities are present in CVE-2014-4348?
CVE-2014-4348 contains multiple cross-site scripting (XSS) vulnerabilities.
5
Can CVE-2014-4348 be exploited by remote users?
Yes, CVE-2014-4348 can be exploited by remote authenticated users.