What is GHSA-5gh4-v2ch-pcx4?

GHSA-5gh4-v2ch-pcx4 is a security advisory published by GitHub Security Advisories with Medium severity. phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities

Which CVE IDs does GHSA-5gh4-v2ch-pcx4 cover?

GHSA-5gh4-v2ch-pcx4 covers the following CVE IDs: CVE-2013-4997. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-5gh4-v2ch-pcx4?

GHSA-5gh4-v2ch-pcx4 affects 1 product, including: composer/phpmyadmin/phpmyadmin:\u003e= 3.5, \u003c 3.5.8.2.

GHSA-5gh4-v2ch-pcx4Medium

phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

August 29, 2023

🔗 CVE IDs covered (1)

CVE-2013-4997 →

📋 Description

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in (1) an anchor identifier to setup/index.php or (2) a chartTitle (aka chart title) value.

🎯 Affected products1

composer/phpmyadmin/phpmyadmin:>= 3.5, < 3.5.8.2

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2013-4997
http://www.phpmyadmin.net/home_page/security/PMASA-2013-9.php
https://github.com/advisories/GHSA-5gh4-v2ch-pcx4