Beveiligingsadvies

CVE-2014-6300

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2014-11-08 11:00:00

Laatst bijgewerkt 2024-08-06 12:10:13

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery (CSRF) attack to create a root account, via a crafted URL, related to js/ajax.js.

← Alle CVE's bekijken Bekijk op cve.org ↗