What is GHSA-r3pq-mp8v-cp33?

GHSA-r3pq-mp8v-cp33 is a security advisory published by GitHub Security Advisories with Low severity. phpMyAdmin Multiple Cross-site Scripting Vulnerabilities in the Database Structure page

Which CVE IDs does GHSA-r3pq-mp8v-cp33 cover?

GHSA-r3pq-mp8v-cp33 covers the following CVE IDs: CVE-2012-4345. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-r3pq-mp8v-cp33?

GHSA-r3pq-mp8v-cp33 affects 2 products, including: composer/phpmyadmin/phpmyadmin:\u003e= 3.4, \u003c 3.4.11.1; composer/phpmyadmin/phpmyadmin:\u003e= 3.5, \u003c 3.5.2.2.

GHSA-r3pq-mp8v-cp33Low

phpMyAdmin Multiple Cross-site Scripting Vulnerabilities in the Database Structure page

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

August 29, 2023

🔗 CVE IDs covered (1)

CVE-2012-4345 →

📋 Description

Multiple cross-site scripting (XSS) vulnerabilities in the Database Structure page in phpMyAdmin 3.4.x before 3.4.11.1 and 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) a crafted table name during table creation, or a (2) Empty link or (3) Drop link for a crafted table name.

🎯 Affected products2

composer/phpmyadmin/phpmyadmin:>= 3.4, < 3.4.11.1
composer/phpmyadmin/phpmyadmin:>= 3.5, < 3.5.2.2

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2012-4345
http://www.phpmyadmin.net/home_page/security/PMASA-2012-4.php
https://web.archive.org/web/20150523055725/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2012:136/?name=MDVSA-2012:136
https://github.com/advisories/GHSA-r3pq-mp8v-cp33