CVE-2013-5001 — Cross-site Scripting in Phpmyadmin

CWE-79 — Cross-site Scripting5 documents5 sources
Severity
3.5LOWNVD
EPSS
0.2%
top 59.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
PhpmyadminDebian Phpmyadmin
Timeline
PublishedJul 31
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in libraries/plugins/transformations/abstract/TextLinkTransformationsPlugin.class.php in phpMyAdmin 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted object name associated with a TextLinkTransformationPlugin link.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages3 packages

▶debiandebian/phpmyadmin< phpmyadmin 4:4.0.4.2-1 (bookworm)
▶Debianphpmyadmin/phpmyadmin< 4:4.0.4.2-1+3
▶NVDphpmyadmin/phpmyadmin6 versions+5

🔴Vulnerability Details

2
GHSA
GHSA-f6c3-pp9c-mrf5: Cross-site scripting (XSS) vulnerability in libraries/plugins/transformations/abstract/TextLinkTransformationsPlugin↗2022-05-17
▶
OSV
CVE-2013-5001: Cross-site scripting (XSS) vulnerability in libraries/plugins/transformations/abstract/TextLinkTransformationsPlugin↗2013-07-31
▶

📋Vendor Advisories

1
Debian
CVE-2013-5001: phpmyadmin - Cross-site scripting (XSS) vulnerability in libraries/plugins/transformations/ab...↗2013
▶

💬Community

1
Bugzilla
CVE-2013-5001 phpMyAdmin: XSS when transforming text to link (PMASA-2013-13)↗2013-07-29
▶