Show filters
273 Total Results
Displaying 171-180 of 273
Sort by:
Attacker Value
Unknown
CVE-2011-1940
Disclosure Date: January 26, 2012 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1 allow remote attackers to inject arbitrary web script or HTML via a crafted table name that triggers improper HTML rendering on a Tracking page, related to (1) libraries/tbl_links.inc.php and (2) tbl_tracking.php.
0
Attacker Value
Unknown
CVE-2011-1941
Disclosure Date: January 26, 2012 (last updated October 04, 2023)
Open redirect vulnerability in the redirector feature in phpMyAdmin 3.4.x before 3.4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
0
Attacker Value
Unknown
CVE-2011-4780
Disclosure Date: December 22, 2011 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in libraries/display_export.lib.php in phpMyAdmin 3.4.x before 3.4.9 allow remote attackers to inject arbitrary web script or HTML via crafted URL parameters, related to the export panels in the (1) server, (2) database, and (3) table sections.
0
Attacker Value
Unknown
CVE-2011-4634
Disclosure Date: December 22, 2011 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.8 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted database name, related to the Database Synchronize panel; (2) a crafted database name, related to the Database rename panel; (3) a crafted SQL query, related to the table overview panel; (4) a crafted SQL query, related to the view creation dialog; (5) a crafted column type, related to the table search dialog; or (6) a crafted column type, related to the create index dialog.
0
Attacker Value
Unknown
CVE-2011-4782
Disclosure Date: December 22, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in libraries/config/ConfigFile.class.php in the setup interface in phpMyAdmin 3.4.x before 3.4.9 allows remote attackers to inject arbitrary web script or HTML via the host parameter.
0
Attacker Value
Unknown
CVE-2011-4107
Disclosure Date: November 17, 2011 (last updated February 09, 2024)
The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.
0
Attacker Value
Unknown
CVE-2011-3646
Disclosure Date: November 17, 2011 (last updated October 04, 2023)
phpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive information via an array-typed js_frame parameter to phpmyadmin.css.php, which reveals the installation path in an error message.
0
Attacker Value
Unknown
CVE-2011-4064
Disclosure Date: November 01, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the setup interface in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to inject arbitrary web script or HTML via a crafted value.
0
Attacker Value
Unknown
CVE-2011-3181
Disclosure Date: August 29, 2011 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x before 3.3.10.4 and 3.4.x before 3.4.4 allow remote attackers to inject arbitrary web script or HTML via a (1) table name, (2) column name, or (3) index name.
0
Attacker Value
Unknown
CVE-2011-2718
Disclosure Date: August 01, 2011 (last updated October 04, 2023)
Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to (1) libraries/schema/User_Schema.class.php and (2) schema_export.php.
0
