phpMyAdmin Cross-site scripting (XSS) vulnerability in central columns feature

Description

References

• nvd.nist.gov/vuln/detail/CVE-2018-7260 · ADVISORY
• phpmyadmin/phpmyadmin commit d2886a3 · WEB
• phpmyadmin/composer · PACKAGE
• udiniya.wordpress.com/2018/02/21/a-tale-of-stealing-session-cookie-in-phpmyadmin · WEB
• phpmyadmin.net/security/PMASA-2018-1 · WEB
• securityfocus.com/bid/103099 · WEB
• udiniya.wordpress.com/2018/02/21/a-tale-of-stealing-session-cookie-in-phpmyadmin · Exploit
• phpmyadmin.net/security/PMASA-2018-1 · Patch

Autres vulnérabilités de phpmyadmin/phpmyadmin

• CVE-2025-24530MOYENNE 6.4An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the check tables feature. A crafted tab…
• CVE-2023-25727MOYENNE 5.4In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-an…
• CVE-2020-22452CRITIQUE 9.8SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engin…
• CVE-2022-0813ÉLEVÉE 7.5PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the …
• CVE-2022-23808MOYENNE 6.1An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can al…