NVD

Id
20926  
Name
CVE-2016-5733  
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a crafted table name that is mishandled during privilege checking in table_row.phtml, (2) a crafted mysqld log_bin directive that is mishandled in log_selector.phtml, (3) the Transformation implementation, (4) AJAX error handling in js/ajax.js, (5) the Designer implementation, (6) the charts implementation in js/tbl_chart.js, or (7) the zoom-search implementation in rows_zoom.phtml.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-07-02  
Modified Date
2016-11-28  
Seq
2016-5733  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
113994 20926 CVE-2016-5733 openSUSE-SU-2016:1699  View
113995 20926 CVE-2016-5733 openSUSE-SU-2016:1700  View
113996 20926 CVE-2016-5733 DSA-3627  View
113997 20926 CVE-2016-5733 91390  View
113998 20926 CVE-2016-5733 https://github.com/phpmyadmin/phpmyadmin/commit/4d21b5c077db50c2a54b7f569d20f463cc2651f5  View
113999 20926 CVE-2016-5733 https://github.com/phpmyadmin/phpmyadmin/commit/615212a14d7d87712202f37354acf8581987fc5a  View
114000 20926 CVE-2016-5733 https://github.com/phpmyadmin/phpmyadmin/commit/79661610f6f65443e0ec1e382a7240437f28436c  View
114001 20926 CVE-2016-5733 https://github.com/phpmyadmin/phpmyadmin/commit/8716855b309dbe65d7b9a5d681b80579b225b322  View
114002 20926 CVE-2016-5733 https://github.com/phpmyadmin/phpmyadmin/commit/895a131d2eb7e447757a35d5731c7d647823ea8b  View
114003 20926 CVE-2016-5733 https://github.com/phpmyadmin/phpmyadmin/commit/960fd1fd52023047a23d069178bfff7463c2cefc  View
114004 20926 CVE-2016-5733 https://github.com/phpmyadmin/phpmyadmin/commit/be3ecbb4cca3fbe20e3b3aa4e049902d18b60865  View
114005 20926 CVE-2016-5733 https://github.com/phpmyadmin/phpmyadmin/commit/d648ade18d6cbb796a93261491c121f078df2d88  View
114006 20926 CVE-2016-5733 https://www.phpmyadmin.net/security/PMASA-2016-26/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2660 JVNDB-2016-003433 phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 phpMyAdmin には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-5733 92239 CVE-2016-5733 20926 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003433.html 2016-06-23 2016-07-07 View