Lucene search
MitreCVE-2023-25727HistoryFeb 13, 2023 - 6:15 a.m.
CVE-2023-25727
2023-02-1306:15:11
CWE-79
mitre
web.nvd.nist.gov
59
phpmyadmin
xss
cve-2023-25727
nvd
security
authentication
sql
upload
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
23.5%
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
Affected configurations
Node
phpmyadminphpmyadminRange<4.9.11
ORphpmyadminphpmyadminRange5.0.0–5.2.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpmyadmin | phpmyadmin | * | cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:* |
Related
osv
osv
Cross-site Scripting vulnerability in drag-and-drop upload of phpMyAdmin
2023-02-13 06:30:59
CVE-2023-25727
2023-02-13 06:15:11
BIT-phpmyadmin-2023-25727
2024-03-06 11:01:27
cvelist
cvelist
CVE-2023-25727
2023-02-13 00:00:00
phpmyadmin
phpmyadmin
XSS vulnerability in drag-and-drop upload
2023-02-07 00:00:00
redos
redos
ROS-20240902-19
2024-09-02 00:00:00
ubuntucve
ubuntucve
CVE-2023-25727
2023-02-13 00:00:00
nvd
nvd
CVE-2023-25727
2023-02-13 06:15:11
github
github
Cross-site Scripting vulnerability in drag-and-drop upload of phpMyAdmin
2023-02-13 06:30:59
veracode
veracode
Cross-site Scripting (XSS)
2023-02-22 07:42:04
prion
prion
Information disclosure
2023-02-13 06:15:00
openvas
openvas
phpMyAdmin 4.3.x < 4.9.11, 5.2.x < 5.2.1 XSS Vulnerability - Windows
2023-02-08 00:00:00
phpMyAdmin 4.3.x < 4.9.11, 5.2.x < 5.2.1 XSS Vulnerability - Linux
2023-02-08 00:00:00
openSUSE: Security Advisory for phpMyAdmin (openSUSE-SU-2023:0047-1)
2024-03-04 00:00:00
debiancve
debiancve
CVE-2023-25727
2023-02-13 06:15:11
nessus
nessus
openSUSE 15 Security Update : phpMyAdmin (openSUSE-SU-2023:0047-1)
2023-02-16 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
23.5%
Related for CVE-2023-25727