CVE-2016-5705

Published Jul 3, 2016 CVSS 3.0 · 6.1 Medium EPSS 1.3% KEV · Not listed
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) server-privileges certificate data fields on the user privileges page, (2) an "invalid JSON" error message in the error console, (3) a database name in the central columns implementation, (4) a group name, or (5) a search name in the bookmarks implementation.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-3627-1 phpmyadmin security update
EUVD EUVD EUVD-2016-6645 phpMyAdmin vulnerable to Cross-site Scripting
Github GHSA Github GHSA GHSA-6q2j-8h8q-46mr phpMyAdmin vulnerable to Cross-site Scripting
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 1:08 AM
Reserved
Jun 16, 2016, 12:00 AM
Status
Modified
Published
Jul 3, 2016, 1:59 AM
Modified
Jun 17, 2026, 12:49 AM