Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbitrary web script or HTML via certain input available in (1) PHP_SELF in (a) server_status.php, and (b) grab_globals.lib.php, (c) display_change_password.lib.php, and (d) common.lib.php in libraries/; and certain input available in PHP_SELF and (2) PATH_INFO in libraries/common.inc.php. NOTE: there might also be other vectors related to (3) REQUEST_URI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
phpMyAdmin 多个跨站脚本攻击漏洞
Vulnerability Description
phpMyAdmin 2.11.1.2版本之前的版本中存在多个跨站脚本攻击漏洞。远程攻击者可以借助(1) (a) server_status.php,和(b) grab_globals.lib.php, (c) display_change_password.lib.php, 和(d)libraries/的common.lib.php中的PHP_SELF的特制的可用输入; 和PHP_SELF以及(2) libraries/common.inc.php中的PATH_INFO中的可用输入,注入任意web脚本或
CVSS Information
N/A
Vulnerability Type
N/A