Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by injecting arbitrary JavaScript or HTML in a (1) db or (2) table parameter value followed by an uppercase </SCRIPT> end tag, which bypasses the protection against lowercase </script>.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
phpMyAdmin index.php 不完全黑名单漏洞
Vulnerability Description
phpMyAdmin 2.8.0到2.9.2版本的index.php中存在不完全黑名单漏洞。远程攻击者可以通过注入任意的JavaScript或HTML到(1)db或(2)table参数值，执行跨站脚本攻击。该参数值被uppercase</SCRIPT>结束标识跟随，会绕过对lowercase </script>的保护机制。
CVSS Information
N/A
Vulnerability Type
N/A