NVD

Id
35417  
Name
CVE-2014-8326  
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database name or (2) table name, related to the libraries/DatabaseInterface.class.php code for SQL debug output and the js/server_status_monitor.js code for the server monitor page.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-11-05  
Modified Date
2015-08-06  
Seq
2014-8326  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
181575 35417 CVE-2014-8326 openSUSE-SU-2014:1347  View
181576 35417 CVE-2014-8326 http://www.phpmyadmin.net/home_page/security/PMASA-2014-12.php  View
181577 35417 CVE-2014-8326 70731  View
181578 35417 CVE-2014-8326 https://github.com/phpmyadmin/phpmyadmin/commit/7b8962dede7631298c81e2c1cd267b81f1e08a8c  View
181579 35417 CVE-2014-8326 https://github.com/phpmyadmin/phpmyadmin/commit/bd68c54d1beeef79d237e8bfda44690834012a76  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16384 JVNDB-2014-005259 phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 phpMyAdmin には、SQL デバッグ出力の libraries/DatabaseInterface.class.php コードおよびサーバモニタページの js/server_status_monitor.js コードに関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-8326 75619 CVE-2014-8326 35417 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005259.html 2014-10-21 2014-11-07 View