CVE

Id
57588  
CVE No.
CVE-2012-4345  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Database Structure page in phpMyAdmin 3.4.x before 3.4.11.1 and 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) a crafted table name during table creation, or a (2) Empty link or (3) Drop link for a crafted table name.  
Phase
Assigned (20120815)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
594134 57588 CVE-2012-4345 CONFIRM:http://www.phpmyadmin.net/home_page/security/PMASA-2012-4.php  View
594135 57588 CVE-2012-4345 MANDRIVA:MDVSA-2012:136  View
594136 57588 CVE-2012-4345 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2012:136  View
594137 57588 CVE-2012-4345 SUSE:openSUSE-SU-2012:1062  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30039 JVNDB-2012-005746 Symantec Enterprise Security Manager における権限を取得される脆弱性 Symantec Enterprise Security Manager (ESM) の (1) Manager および (2) Agent コンポーネントには、引用符で囲まれていない Windows 検索パスにより、権限を取得される脆弱性が存在します。 CVE-2012-4350 57588 7.2 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005746.html  View