phpMyAdmin XSS when checking tables

Description

References

• nvd.nist.gov/vuln/detail/CVE-2025-24530 · ADVISORY
• phpmyadmin/phpmyadmin commit 23c13a8 · WEB
• phpmyadmin/phpmyadmin · PACKAGE
• lists.debian.org/debian-lts-announce/2025/04/msg00016.html · WEB
• phpmyadmin.net/security/PMASA-2025-1 · WEB
• phpmyadmin.net/security/PMASA-2025-1

Autres vulnérabilités de phpmyadmin/phpmyadmin

• CVE-2023-25727MOYENNE 5.4In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-an…
• CVE-2020-22452CRITIQUE 9.8SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engin…
• CVE-2022-0813ÉLEVÉE 7.5PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the …
• CVE-2022-23808MOYENNE 6.1An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can al…
• CVE-2022-23807MOYENNE 4.3An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2. A valid user who is already authenticated to phpMyAdmin can man…