What is GHSA-rfpg-2fp8-2fph?

GHSA-rfpg-2fp8-2fph is a security advisory published by GitHub Security Advisories with Low severity. phpMyAdmin multiple cross-site scripting vulnerabilities

Which CVE IDs does GHSA-rfpg-2fp8-2fph cover?

GHSA-rfpg-2fp8-2fph covers the following CVE IDs: CVE-2012-5339. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-rfpg-2fp8-2fph?

GHSA-rfpg-2fp8-2fph affects 1 product, including: composer/phpmyadmin/phpmyadmin:\u003e= 3.5, \u003c 3.5.3.

GHSA-rfpg-2fp8-2fphLow

phpMyAdmin multiple cross-site scripting vulnerabilities

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

August 29, 2023

🔗 CVE IDs covered (1)

CVE-2012-5339 →

📋 Description

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted name of (1) an event, (2) a procedure, or (3) a trigger.

🎯 Affected products1

composer/phpmyadmin/phpmyadmin:>= 3.5, < 3.5.3

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2012-5339
https://github.com/phpmyadmin/phpmyadmin/commit/6ea8fad3f999bfdf79eb6fe31309592bca54d611
https://github.com/phpmyadmin/phpmyadmin/commit/cfd688d2512df9827a8ecc0412fc264fc5bcb186
http://lists.opensuse.org/opensuse-updates/2012-11/msg00033.html
http://www.phpmyadmin.net/home_page/security/PMASA-2012-6.php
https://web.archive.org/web/20121020000514/http://www.securityfocus.com/bid/55925
https://github.com/advisories/GHSA-rfpg-2fp8-2fph