CVE-2019-1000004: XSS
yugandhargangu JspMyAdmin2 version 1.0.6 and earlier contains a Cross Site Scripting (XSS) vulnerability in sidebar and table data that can result in Database fields aren't properly sanitized and allow code injection (Cross-Site Scripting). This attack appears to be exploitable via the payload needs to be stored in the database and the victim must see the db value in question.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1000004?
CVE-2019-1000004 has a severity rating of medium due to its potential for Cross Site Scripting (XSS) attacks.
How do I fix CVE-2019-1000004?
To fix CVE-2019-1000004, upgrade to JspMyAdmin2 version 1.0.7 or later, which addresses the XSS vulnerability.
What types of attacks can CVE-2019-1000004 lead to?
CVE-2019-1000004 can lead to attacks that exploit Cross Site Scripting vulnerabilities, allowing for code injection via unsanitized database fields.
Which versions of JspMyAdmin2 are affected by CVE-2019-1000004?
JspMyAdmin2 version 1.0.6 and earlier are affected by CVE-2019-1000004.
What components are involved in the CVE-2019-1000004 vulnerability?
The CVE-2019-1000004 vulnerability involves the sidebar and table data components of the JspMyAdmin2 application.