What is GHSA-8987-93fh-rcwq?

GHSA-8987-93fh-rcwq is a security advisory published by GitHub Security Advisories with Medium severity. phpMyAdmin Cross-site Scripting (XSS) vulnerability

Which CVE IDs does GHSA-8987-93fh-rcwq cover?

GHSA-8987-93fh-rcwq covers the following CVE IDs: CVE-2018-19970. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8987-93fh-rcwq?

GHSA-8987-93fh-rcwq has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-8987-93fh-rcwq?

GHSA-8987-93fh-rcwq affects 1 product, including: composer/phpmyadmin/phpmyadmin:\u003e= 4.0, \u003c 4.8.4.

GHSA-8987-93fh-rcwqMediumCVSS 6.1

phpMyAdmin Cross-site Scripting (XSS) vulnerability

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

May 4, 2024

🔗 CVE IDs covered (1)

CVE-2018-19970 →

📋 Description

In phpMyAdmin before 4.8.4, an XSS vulnerability was found in the navigation tree, where an attacker can deliver a payload to a user through a crafted database/table name.

🎯 Affected products1

composer/phpmyadmin/phpmyadmin:>= 4.0, < 4.8.4

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2018-19970
https://lists.debian.org/debian-lts-announce/2019/02/msg00003.html
https://security.gentoo.org/glsa/201904-16
http://www.securityfocus.com/bid/106181
https://www.phpmyadmin.net/security/PMASA-2018-8
https://github.com/advisories/GHSA-8987-93fh-rcwq