phpMyAdmin CVE-2018-12581 Cross Site Scripting Vulnerability

Bugtraq ID:	104530
Class:	Input Validation Error
CVE:	CVE-2018-12581
Remote:	Yes
Local:	No
Published:	Jun 19 2018 12:00AM
Updated:	Jun 19 2018 12:00AM
Credit:	William Desportes
Vulnerable:	phpMyAdmin phpMyAdmin 4.8.1 phpMyAdmin phpMyAdmin 4.8 phpMyAdmin phpMyAdmin 4.7.7 phpMyAdmin phpMyAdmin 4.7.6 phpMyAdmin phpMyAdmin 4.7.5 phpMyAdmin phpMyAdmin 4.7.4 phpMyAdmin phpMyAdmin 4.7.3 phpMyAdmin phpMyAdmin 4.7.2 phpMyAdmin phpMyAdmin 4.7.1 phpMyAdmin phpMyAdmin 4.7 phpMyAdmin phpMyAdmin 4.4.7 phpMyAdmin phpMyAdmin 2.9 .1 phpMyAdmin phpMyAdmin 2.9 phpMyAdmin phpMyAdmin 2.8.4 phpMyAdmin phpMyAdmin 2.8.2 phpMyAdmin phpMyAdmin 2.8.1 phpMyAdmin phpMyAdmin 2.8 .4 phpMyAdmin phpMyAdmin 2.8 .3 phpMyAdmin phpMyAdmin 2.8 .1 phpMyAdmin phpMyAdmin 2.8 phpMyAdmin phpMyAdmin 2.7 phpMyAdmin phpMyAdmin 2.6.2 + Gentoo Linux phpMyAdmin phpMyAdmin 2.6.1 phpMyAdmin phpMyAdmin 2.6 phpMyAdmin phpMyAdmin 2.5.7 phpMyAdmin phpMyAdmin 2.5.5 phpMyAdmin phpMyAdmin 2.5.4 phpMyAdmin phpMyAdmin 2.5.3 + S.u.S.E. Linux Personal 9.3 + S.u.S.E. Linux Personal 9.2 x86_64 + S.u.S.E. Linux Personal 9.2 x86_64 + S.u.S.E. Linux Personal 9.2 x86_64 + S.u.S.E. Linux Personal 9.2 + S.u.S.E. Linux Personal 9.2 + S.u.S.E. Linux Personal 9.2 + S.u.S.E. Linux Personal 9.1 x86_64 + S.u.S.E. Linux Personal 9.1 x86_64 + S.u.S.E. Linux Personal 9.1 x86_64 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 + S.u.S.E. Linux Personal 9.0 + S.u.S.E. Linux Personal 9.0 phpMyAdmin phpMyAdmin 2.5.2 phpMyAdmin phpMyAdmin 2.5.1 phpMyAdmin phpMyAdmin 2.3.3 phpMyAdmin phpMyAdmin 2.3.2 phpMyAdmin phpMyAdmin 2.3.1 phpMyAdmin phpMyAdmin 2.2.6 phpMyAdmin phpMyAdmin 2.2.5 phpMyAdmin phpMyAdmin 2.2.4 phpMyAdmin phpMyAdmin 2.2.3 phpMyAdmin phpMyAdmin 2.2.2 phpMyAdmin phpMyAdmin 2.2 phpMyAdmin phpMyAdmin 2.1 .2 phpMyAdmin phpMyAdmin 2.1 .1 phpMyAdmin phpMyAdmin 2.1 phpMyAdmin phpMyAdmin 2.0.5 phpMyAdmin phpMyAdmin 2.0.4 phpMyAdmin phpMyAdmin 2.0.3 phpMyAdmin phpMyAdmin 2.0.2 phpMyAdmin phpMyAdmin 2.0.1 phpMyAdmin phpMyAdmin 2.0 phpMyAdmin phpMyAdmin 1.2.2 phpMyAdmin phpMyAdmin 4.8.0-1 phpMyAdmin phpMyAdmin 2.8.3 phpMyAdmin phpMyAdmin 2.8.0.2 phpMyAdmin phpMyAdmin 2.5.11.2 phpMyAdmin phpMyAdmin 2.5.0 phpMyAdmin phpMyAdmin 2.4.0 phpMyAdmin phpMyAdmin 2.1.2 phpMyAdmin phpMyAdmin 2.1.1 phpMyAdmin phpMyAdmin 2.1 phpMyAdmin phpMyAdmin 2.0 phpMyAdmin phpMyAdmin 1.3 phpMyAdmin phpMyAdmin 1.2.9.5 phpMyAdmin phpMyAdmin 1.2.9.3 phpMyAdmin phpMyAdmin 1.2.9.2 phpMyAdmin phpMyAdmin 1.2.9.1 phpMyAdmin phpMyAdmin 1.2.9 phpMyAdmin phpMyAdmin 1.2.8 phpMyAdmin phpMyAdmin 1.2.7 phpMyAdmin phpMyAdmin 1.2.6 phpMyAdmin phpMyAdmin 1.2.5 phpMyAdmin phpMyAdmin 1.2.4 phpMyAdmin phpMyAdmin 1.2.3 phpMyAdmin phpMyAdmin 1.2.1 phpMyAdmin phpMyAdmin 1.0.8 phpMyAdmin phpMyAdmin 1.0.7 phpMyAdmin phpMyAdmin 1.0.6 phpMyAdmin phpMyAdmin 1.0.5 phpMyAdmin phpMyAdmin 1.0.4 phpMyAdmin phpMyAdmin 1.0.3 phpMyAdmin phpMyAdmin 1.0.2 phpMyAdmin phpMyAdmin 1.0.1 phpMyAdmin phpMyAdmin 1.0.0
Not Vulnerable:	phpMyAdmin phpMyAdmin 4.8.2

phpMyAdmin CVE-2018-12581 Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

phpMyAdmin CVE-2018-12581 Cross Site Scripting Vulnerability

References:

• phpMyAdmin Homepage (phpMyAdmin)
  
• Escape database name in URL (phpMyAdmin)
  
• PMASA-2018-3 (phpMyAdmin )