NVD

Id
33002  
Name
CVE-2014-5274  
Description
Cross-site scripting (XSS) vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-08-21  
Modified Date
2015-11-16  
Seq
2014-5274  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
173226 33002 CVE-2014-5274 openSUSE-SU-2014:1069  View
173227 33002 CVE-2014-5274 http://www.phpmyadmin.net/home_page/security/PMASA-2014-9.php  View
173228 33002 CVE-2014-5274 https://github.com/phpmyadmin/phpmyadmin/commit/0cd293f5e13aa245e4a57b8d373597cc0e421b6f  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15019 JVNDB-2014-003894 phpMyAdmin のビュー操作ページにおけるクロスサイトスクリプティングの脆弱性 phpMyAdmin のビュー操作ページには、js/functions.js に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-5274 72563 CVE-2014-5274 33002 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003894.html 2014-08-17 2014-08-25 View