CVE-2014-5273: XSS
First published: Fri Aug 22 2014(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) browse table page, related to js/sql.js; (2) ENUM editor page, related to js/functions.js; (3) monitor page, related to js/server_status_monitor.js; (4) query charts page, related to js/tbl_chart.js; or (5) table relations page, related to libraries/tbl_relation.lib.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| phpMyAdmin phpMyAdmin | =4.0.0 | |
| phpMyAdmin phpMyAdmin | =4.0.0-rc2 | |
| phpMyAdmin phpMyAdmin | =4.0.0-rc3 | |
| phpMyAdmin phpMyAdmin | =4.0.1 | |
| phpMyAdmin phpMyAdmin | =4.0.2 | |
| phpMyAdmin phpMyAdmin | =4.0.3 | |
| phpMyAdmin phpMyAdmin | =4.0.4 | |
| phpMyAdmin phpMyAdmin | =4.0.4.1 | |
| phpMyAdmin phpMyAdmin | =4.0.4.2 | |
| phpMyAdmin phpMyAdmin | =4.0.5 | |
| phpMyAdmin phpMyAdmin | =4.0.6 | |
| phpMyAdmin phpMyAdmin | =4.0.7 | |
| phpMyAdmin phpMyAdmin | =4.0.8 | |
| phpMyAdmin phpMyAdmin | =4.0.9 | |
| phpMyAdmin phpMyAdmin | =4.0.10 | |
| phpMyAdmin phpMyAdmin | =4.0.10.1 | |
| phpMyAdmin phpMyAdmin | =4.1.0 | |
| phpMyAdmin phpMyAdmin | =4.1.1 | |
| phpMyAdmin phpMyAdmin | =4.1.2 | |
| phpMyAdmin phpMyAdmin | =4.1.3 | |
| phpMyAdmin phpMyAdmin | =4.1.4 | |
| phpMyAdmin phpMyAdmin | =4.1.5 | |
| phpMyAdmin phpMyAdmin | =4.1.6 | |
| phpMyAdmin phpMyAdmin | =4.1.7 | |
| phpMyAdmin phpMyAdmin | =4.1.8 | |
| phpMyAdmin phpMyAdmin | =4.1.9 | |
| phpMyAdmin phpMyAdmin | =4.1.10 | |
| phpMyAdmin phpMyAdmin | =4.1.11 | |
| phpMyAdmin phpMyAdmin | =4.1.12 | |
| phpMyAdmin phpMyAdmin | =4.1.13 | |
| phpMyAdmin phpMyAdmin | =4.1.14 | |
| phpMyAdmin phpMyAdmin | =4.1.14.1 | |
| phpMyAdmin phpMyAdmin | =4.1.14.2 | |
| phpMyAdmin phpMyAdmin | =4.2.0 | |
| phpMyAdmin phpMyAdmin | =4.2.1 | |
| phpMyAdmin phpMyAdmin | =4.2.2 | |
| phpMyAdmin phpMyAdmin | =4.2.3 | |
| phpMyAdmin phpMyAdmin | =4.2.4 | |
| phpMyAdmin phpMyAdmin | =4.2.5 | |
| phpMyAdmin phpMyAdmin | =4.2.6 | |
| phpMyAdmin phpMyAdmin | =4.2.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-updates/2014-08/msg00045.html
- http://secunia.com/advisories/60397
- http://www.phpmyadmin.net/home_page/security/PMASA-2014-8.php
- https://github.com/phpmyadmin/phpmyadmin/commit/2c45d7caa614afd71dbe3d0f7270f51ce5569614
- https://github.com/phpmyadmin/phpmyadmin/commit/3ffc967fb60cf2910cc2f571017e977558c67821
- https://github.com/phpmyadmin/phpmyadmin/commit/647c9d12e33a6b64e1c3ff7487f72696bdf2dccb
- https://github.com/phpmyadmin/phpmyadmin/commit/90ddeecf60fc029608b972e490b735f3a65ed0cb
- https://github.com/phpmyadmin/phpmyadmin/commit/cd9f302bf7f91a160fe7080f9a612019ef847f1c
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/tags
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/remedy
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/phpmyadmin
- canonical/phpmyadmin phpmyadmin
- version/phpmyadmin phpmyadmin/4.0.0
- version/phpmyadmin phpmyadmin/4.0.0-rc2
- version/phpmyadmin phpmyadmin/4.0.0-rc3
- version/phpmyadmin phpmyadmin/4.0.1
- version/phpmyadmin phpmyadmin/4.0.2
- version/phpmyadmin phpmyadmin/4.0.3
- version/phpmyadmin phpmyadmin/4.0.4
- version/phpmyadmin phpmyadmin/4.0.4.1
- version/phpmyadmin phpmyadmin/4.0.4.2
- version/phpmyadmin phpmyadmin/4.0.5
- version/phpmyadmin phpmyadmin/4.0.6
- version/phpmyadmin phpmyadmin/4.0.7
- version/phpmyadmin phpmyadmin/4.0.8
- version/phpmyadmin phpmyadmin/4.0.9
- version/phpmyadmin phpmyadmin/4.0.10
- version/phpmyadmin phpmyadmin/4.0.10.1
- version/phpmyadmin phpmyadmin/4.1.0
- version/phpmyadmin phpmyadmin/4.1.1
- version/phpmyadmin phpmyadmin/4.1.2
- version/phpmyadmin phpmyadmin/4.1.3
- version/phpmyadmin phpmyadmin/4.1.4
- version/phpmyadmin phpmyadmin/4.1.5
- version/phpmyadmin phpmyadmin/4.1.6
- version/phpmyadmin phpmyadmin/4.1.7
- version/phpmyadmin phpmyadmin/4.1.8
- version/phpmyadmin phpmyadmin/4.1.9
- version/phpmyadmin phpmyadmin/4.1.10
- version/phpmyadmin phpmyadmin/4.1.11
- version/phpmyadmin phpmyadmin/4.1.12
- version/phpmyadmin phpmyadmin/4.1.13
- version/phpmyadmin phpmyadmin/4.1.14
- version/phpmyadmin phpmyadmin/4.1.14.1
- version/phpmyadmin phpmyadmin/4.1.14.2
- version/phpmyadmin phpmyadmin/4.2.0
- version/phpmyadmin phpmyadmin/4.2.1
- version/phpmyadmin phpmyadmin/4.2.2
- version/phpmyadmin phpmyadmin/4.2.3
- version/phpmyadmin phpmyadmin/4.2.4
- version/phpmyadmin phpmyadmin/4.2.5
- version/phpmyadmin phpmyadmin/4.2.6
- version/phpmyadmin phpmyadmin/4.2.7