CVE-2014-8960

Cross-site scripting (XSS) vulnerability in libraries/error_report.lib.php in the error-reporting feature in phpMyAdmin 4.1.x before 4.1.14.7 and 4.2.x before 4.2.12 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename.

Published: Nov 30, 2014
Updated: Apr 13, 2023
CVE: CVE-2014-8960
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 3.5
AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
phpmyadmin / phpmyadmin	4.1.14.1	4.1.14.1.x
phpmyadmin / phpmyadmin	4.1.2	4.1.2.x
phpmyadmin / phpmyadmin	4.2.1	4.2.1.x
phpmyadmin / phpmyadmin	4.1.8	4.1.8.x
phpmyadmin / phpmyadmin	4.1.10	4.1.10.x
phpmyadmin / phpmyadmin	4.1.5	4.1.5.x
phpmyadmin / phpmyadmin	4.1.14.3	4.1.14.3.x
phpmyadmin / phpmyadmin	4.2.8.1	4.2.8.1.x
phpmyadmin / phpmyadmin	4.1.6	4.1.6.x
phpmyadmin / phpmyadmin	4.1.14.6	4.1.14.6.x
phpmyadmin / phpmyadmin	4.2.2	4.2.2.x
phpmyadmin / phpmyadmin	4.1.14.2	4.1.14.2.x
phpmyadmin / phpmyadmin	4.2.4	4.2.4.x
phpmyadmin / phpmyadmin	4.1.9	4.1.9.x
phpmyadmin / phpmyadmin	4.1.13	4.1.13.x
phpmyadmin / phpmyadmin	4.2.11	4.2.11.x
phpmyadmin / phpmyadmin	4.2.6	4.2.6.x
phpmyadmin / phpmyadmin	4.2.7	4.2.7.x
phpmyadmin / phpmyadmin	4.2.0	4.2.0.x
phpmyadmin / phpmyadmin	4.1.7	4.1.7.x
phpmyadmin / phpmyadmin	4.1.4	4.1.4.x
phpmyadmin / phpmyadmin	4.1.3	4.1.3.x
phpmyadmin / phpmyadmin	4.1.12	4.1.12.x
phpmyadmin / phpmyadmin	4.1.0	4.1.0.x
phpmyadmin / phpmyadmin	4.1.11	4.1.11.x
phpmyadmin / phpmyadmin	4.2.9	4.2.9.x
phpmyadmin / phpmyadmin	4.2.3	4.2.3.x
phpmyadmin / phpmyadmin	4.1.14.5	4.1.14.5.x
phpmyadmin / phpmyadmin	4.2.5	4.2.5.x
phpmyadmin / phpmyadmin	4.1.14	4.1.14.x
phpmyadmin / phpmyadmin	4.1.14.4	4.1.14.4.x
phpmyadmin / phpmyadmin	4.2.10	4.2.10.x
phpmyadmin / phpmyadmin	4.2.7.1	4.2.7.1.x
phpmyadmin / phpmyadmin	4.2.8	4.2.8.x
phpmyadmin / phpmyadmin	4.1.1	4.1.1.x

Vulnerability Database

289,784

CVE-2014-8960