Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify config/config.inc.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
phpAdmin setup.php 跨站脚本攻击漏洞
Vulnerability Description
phpMyAdmin是用PHP编写的工具,用于通过WEB管理MySQL。 phpMyAdmin 2.11.8之前版本的setup.php文件存在跨站脚本攻击漏洞。攻击者通过构造setup参数,可以注入任意web脚本或者html。注:形成攻击的前提是攻击者必须能够修改config/config.inc.php文件。
CVSS Information
N/A
Vulnerability Type
N/A