Lucene search

K
cvelistMitreCVELIST:CVE-2014-4348
HistoryJun 25, 2014 - 10:00 a.m.

CVE-2014-4348

2014-06-2510:00:00
mitre
www.cve.org
10

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

47.0%

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database name or (2) table name that is improperly handled after presence in (a) the favorite list or (b) recent tables.

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

47.0%