CVE-2016-2040

Published Feb 20, 2016 CVSS 3.0 · 5.4 Medium EPSS 1.6% KEV · Not listed
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allow remote authenticated users to inject arbitrary web script or HTML via a (1) table name, (2) SET value, (3) search query, or (4) hostname in a Location header.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-481-1 phpmyadmin security update
Debian DLA Debian DLA DLA-481-2 phpmyadmin regression update
Debian DSA Debian DSA DSA-3627-1 phpmyadmin security update
EUVD EUVD EUVD-2022-4833 Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allow remote authenticated users to inject arbitrary web script or HTML via a (1) table name, (2) SET value, (3) search query, or (4) hostname in a Location header.
Github GHSA Github GHSA GHSA-pw34-qf6c-84fc phpMyAdmin XSS Vulnerability
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 11:17 PM
Reserved
Jan 22, 2016, 12:00 AM
Status
Modified
Published
Feb 20, 2016, 1:59 AM
Modified
Jun 17, 2026, 12:43 AM