phpMyAdmin Cross-site Scripting (XSS)

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-26934 · ADVISORY
• FriendsOfPHP/security-advisories · WEB
• phpmyadmin/composer · PACKAGE
• lists.debian.org/debian-lts-announce/2020/10/msg00024.html · WEB
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHST4E5IJG7IKZTTW3R6MEZPVHJZ472K · WEB
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PXK37YEHSDYCIPQSYEMN2OFTP2ZLM7DO · WEB
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNLGHVDNAEZEGRTUESSSQFM7MZTHIDQ5 · WEB
• lists.fedoraproject.org/archives/list/[email protected]/message/FHST4E5IJG7IKZTTW3R6MEZPVHJZ472K · WEB

Lỗ hổng khác của phpmyadmin/phpmyadmin

• CVE-2025-24530TRUNG BÌNH 6.4An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the check tables feature. A crafted tab…
• CVE-2023-25727TRUNG BÌNH 5.4In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-an…
• CVE-2020-22452NGHIÊM TRỌNG 9.8SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engin…
• CVE-2022-0813CAO 7.5PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the …
• CVE-2022-23808TRUNG BÌNH 6.1An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can al…