Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-5414

Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro

Description

A vulnerability have been discovered in PhpMyBackupPro affecting version 2.3 that could allow an attacker to execute XSS through /phpmybackuppro/get_file.php, 'view' parameter. This vulnerabilities could allow an attacker to create a specially crafted URL and send it to a victim to retrieve their session details.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PhpMyBackupPro PhpMyBackupPro

Default version status: unaffected

  • 2.3affected

References