CVE-2014-4986: XSS
Multiple cross-site scripting (XSS) vulnerabilities in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) table name or (2) column name that is improperly handled during construction of an AJAX confirmation message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4986?
CVE-2014-4986 is classified as a medium severity vulnerability due to its potential to allow cross-site scripting (XSS) attacks.
How do I fix CVE-2014-4986?
To fix CVE-2014-4986, you need to upgrade phpMyAdmin to version 4.0.10.1 or later, or to version 4.1.14.2 or later, or to version 4.2.6 or later.
What types of vulnerabilities are addressed by CVE-2014-4986?
CVE-2014-4986 addresses multiple cross-site scripting (XSS) vulnerabilities that allow remote authenticated users to inject arbitrary web script or HTML.
Who is affected by CVE-2014-4986?
CVE-2014-4986 affects users of phpMyAdmin versions 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6.
What are the potential impacts of CVE-2014-4986?
The potential impacts of CVE-2014-4986 include unauthorized access to sensitive data, session hijacking, and the execution of malicious scripts on user browsers.