| Package | Affected versions | Patched versions |
|---|---|---|
| phpmyadmin/phpmyadmin | ≥ 3.3.0, < 3.3.10.1≥ 3.4.0, < 3.4.1 | 3.3.10.13.4.1 |
| phpmyadmin | = 3.3.0.0= 3.3.1.0= 3.3.10.0= 3.3.2.0= 3.3.3.0= 3.3.4.0= 3.3.5.0= 3.3.5.1= 3.3.6= 3.3.7= 3.3.8= 3.3.8.1= 3.3.9.0= 3.3.9.1= 3.3.9.2= 3.4.0.0 |
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1 allow remote attackers to inject arbitrary web script or HTML via a crafted table name that triggers improper HTML rendering on a Tracking page, related to (1) libraries/tbl_links.inc.php and (2) tbl_tracking.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free