NVD

Id
33834  
Name
CVE-2014-6300  
Description
Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery (CSRF) attack to create a root account, via a crafted URL, related to js/ajax.js.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-11-08  
Modified Date
2016-12-21  
Seq
2014-6300  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
175716 33834 CVE-2014-6300 openSUSE-SU-2014:1150  View
175717 33834 CVE-2014-6300 http://www.phpmyadmin.net/home_page/security/PMASA-2014-10.php  View
175718 33834 CVE-2014-6300 69790  View
175719 33834 CVE-2014-6300 https://github.com/phpmyadmin/phpmyadmin/commit/33b39f9f1dd9a4d27856530e5ac004e23b30e8ac  View
175720 33834 CVE-2014-6300 GLSA-201505-03  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16437 JVNDB-2014-005312 phpMyAdmin の micro history の実装におけるクロスサイトスクリプティングの脆弱性 phpMyAdmin の micro history の実装には、js/ajax.js に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-6300 73592 CVE-2014-6300 33834 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005312.html 2014-09-13 2014-11-11 View