Все бюллетени/sisyphus/ALT-PU-2014-2060-2
ALT-PU-2014-2060-2

Обновление пакета phpMyAdmin в ветке sisyphus

Версия4.2.8-alt1
Задание#128874
Опубликовано2026-02-04
Макс. серьёзностьLOW
Серьёзность:

Закрытые проблемы (3)

CVE-2014-5273
LOW3.5

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) browse table page, related to js/sql.js; (2) ENUM editor page, related to js/functions.js; (3) monitor page, related to js/server_status_monitor.js; (4) query charts page, related to js/tbl_chart.js; or (5) table relations page, related to libraries/tbl_relation.lib.php.

Опубликовано: 2014-08-22Изменено: 2025-04-12
CVSS 2.0НИЗКАЯ 3.5
CVSS:2.0/AV:N/AC:M/Au:S/C:N/I:P/A:N
Ссылки
CVE-2014-5274
LOW3.5

Cross-site scripting (XSS) vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js.

Опубликовано: 2014-08-22Изменено: 2025-04-12
CVSS 2.0НИЗКАЯ 3.5
CVSS:2.0/AV:N/AC:M/Au:S/C:N/I:P/A:N
Ссылки