phpMyAdmin CVE-2014-9219 Cross Site Scripting Vulnerability
BID:71435
Info
phpMyAdmin CVE-2014-9219 Cross Site Scripting Vulnerability
| Bugtraq ID: | 71435 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-9219 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 03 2014 12:00AM |
| Updated: | May 07 2015 05:07PM |
| Credit: | Manuel Fernandez of ElevenPaths. |
| Vulnerable: |
phpMyAdmin phpMyAdmin 4.2.11 phpMyAdmin phpMyAdmin 4.2.8 phpMyAdmin phpMyAdmin 4.2.6 phpMyAdmin phpMyAdmin 4.2.5 phpMyAdmin phpMyAdmin 4.2.4 phpMyAdmin phpMyAdmin 4.2.3 phpMyAdmin phpMyAdmin 4.2.2 phpMyAdmin phpMyAdmin 4.2.1 phpMyAdmin phpMyAdmin 4.2 phpMyAdmin phpMyAdmin 4.2.9.1 phpMyAdmin phpMyAdmin 4.2.8.1 phpMyAdmin phpMyAdmin 4.2.7.1 phpMyAdmin phpMyAdmin 4.2.7 phpMyAdmin phpMyAdmin 4.2.12 phpMyAdmin phpMyAdmin 4.2.10.1 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 |
| Not Vulnerable: |
phpMyAdmin phpMyAdmin 4.2.13.1 |
Exploit / POC
phpMyAdmin CVE-2014-9219 Cross Site Scripting Vulnerability
Attackers can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
Attackers can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
References
phpMyAdmin CVE-2014-9219 Cross Site Scripting Vulnerability
References:
References:
- phpMyAdmin Homepage (phpMyAdmin)
- PMASA-2014-18 :XSS vulnerability in redirection mechanism (phpMyAdmin)