Description
phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privilege to inject script via unescaped table names in DesignerHistory.display(). Attackers can create a table whose name contains HTML markup that executes in another user's session when they add a condition on it in Designer query mode.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
phpMyAdmin phpMyAdmin
Default version status: unaffected
0 to ≤ 5.2.3affected
pkg:composer/phpmyadmin/phpmyadminReferences
- https://github.com/phpmyadmin/phpmyadmin/blob/RELEASE_5_2_3/js/src/designer/history.js#L85-L86 ↗
- https://abraxaslabs.tech/research/phpmyadmin-vqb-xss ↗
- https://github.com/phpmyadmin/phpmyadmin ↗
- https://www.vulncheck.com/advisories/phpmyadmin-through-5.2.3-stored-xss-via-designer-query-history-table-name ↗