CVE-2012-4345 in phpMyAdmin

Summary

Multiple cross-site scripting (XSS) vulnerabilities in the Database Structure page in phpMyAdmin 3.4.x before 3.4.11.1 and 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) a crafted table name during table creation, or a (2) Empty link or (3) Drop link for a crafted table name.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

08/15/2012

Disclosure

08/21/2012

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
6022	phpMyAdmin Database Structure CREATE TABLE cross site scripting	79	Proof-of-Concept	Official fix	CVE-2012-4345
6021	phpMyAdmin Database Structure DROP Link cross site scripting	79	Proof-of-Concept	Official fix	CVE-2012-4345

Sources

• MITRE
• NVD
• CVE Details