CVE

Id
76259  
CVE No.
CVE-2014-8958  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database, (2) table, or (3) column name that is improperly handled during rendering of the table browse page; a crafted ENUM value that is improperly handled during rendering of the (4) table print view or (5) zoom search page; or (6) a crafted pma_fontsize cookie that is improperly handled during rendering of the home page.  
Phase
Assigned (20141118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
703106 76259 CVE-2014-8958 CONFIRM:http://www.phpmyadmin.net/home_page/security/PMASA-2014-13.php  View
703107 76259 CVE-2014-8958 CONFIRM:https://github.com/phpmyadmin/phpmyadmin/commit/1bc04ec95038f2356ad33752090001bf1c047208  View
703108 76259 CVE-2014-8958 CONFIRM:https://github.com/phpmyadmin/phpmyadmin/commit/2a3b7393d1d5a8ba0543699df94a08a0f5728fe0  View
703109 76259 CVE-2014-8958 CONFIRM:https://github.com/phpmyadmin/phpmyadmin/commit/2ffdbf2d7daa0b92541d8b754e2afac555d3ed21  View
703110 76259 CVE-2014-8958 CONFIRM:https://github.com/phpmyadmin/phpmyadmin/commit/d32da348c4de2379482a48661ce968a55eebe5c4  View
703111 76259 CVE-2014-8958 DEBIAN:DSA-3382  View
703112 76259 CVE-2014-8958 URL:http://www.debian.org/security/2015/dsa-3382  View
703113 76259 CVE-2014-8958 GENTOO:GLSA-201505-03  View
703114 76259 CVE-2014-8958 URL:https://security.gentoo.org/glsa/201505-03  View
703115 76259 CVE-2014-8958 MANDRIVA:MDVSA-2014:228  View
703116 76259 CVE-2014-8958 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2014:228  View
703117 76259 CVE-2014-8958 SUSE:openSUSE-SU-2014:1561  View
703118 76259 CVE-2014-8958 URL:http://lists.opensuse.org/opensuse-updates/2014-12/msg00017.html  View
703119 76259 CVE-2014-8958 BID:71243  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
17001 JVNDB-2014-005876 Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性 Microsoft Internet Explorer 6 から 8 には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2014-8966 76259 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005876.html  View