phpMyAdmin Implementation XSS Vulnerability on Server Monitor Page

2022-05-1402:05:34

Google

osv.dev

xss vulnerability

phpmyadmin

server monitor page

remote authenticated users

database name

table name

sql debug output

server status monitor page

html injection

web script injection

EPSS

0.002

Percentile

56.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database name or (2) table name, related to the libraries/DatabaseInterface.class.php code for SQL debug output and the js/server_status_monitor.js code for the server monitor page.