| शीर्षक | phpMyAdmin 3.4.0 Cross Site Scripting |
|---|
| विवरण | Access the url https://stg.socsc.smu.edu.sg/phpMyAdmin/setup/index.php
Click on "New Server" (or access https://stg.socsc.smu.edu.sg/phpMyAdmin/setup/index.php?tab_hash=&check_page_refresh=1&collation_connection=utf8_general_ci&token=3fd11d166ce1960e6b7d23f02f81f7aa&page=servers&mode=add&submit=New+server)
In the server creation form in phpmyadmin, in the server name, insert a generic payload like <script>alert(9)</script> and see the alert prompt appear.
URL demo:
https://stg.socsc.smu.edu.sg/phpMyAdmin/setup/index.php
|
|---|
| उपयोगकर्ता | c4ng4c3ir0 (UID 38456) |
|---|
| सबमिशन | 05/02/2025 04:56 PM (2 साल पहले) |
|---|
| संयम | 09/02/2025 08:37 AM (4 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 59262 [phpMyAdmin तक 3.4.5.0 Setup Interface क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 0 |
|---|