Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
phpMyAdmin Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2014-6300 - Vulnerability Database
phpMyAdmin

phpMyAdmin Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2014-6300

Medium
Reference: CVE-2014-6300
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-6300
Title: phpMyAdmin Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Overview:

Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3 4.1.x before 4.1.14.4 and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML and consequently conduct a cross-site request forgery (CSRF) attack to create a root account via a crafted URL related to js/ajax.js.