CVE-2012-4345

Published: Aug 21, 2012Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Database Structure page in phpMyAdmin 3.4.x before 3.4.11.1 and 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) a crafted table name during table creation, or a (2) Empty link or (3) Drop link for a crafted table name.

Affected (21)

Products: Phpmyadmin: Phpmyadmin

Phpmyadmin

1 product

Phpmyadmin

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 3.4.0.0
Phpmyadmin Phpmyadmin	Version 3.4.1.0
Phpmyadmin Phpmyadmin	Version 3.4.10.0
Phpmyadmin Phpmyadmin	Version 3.4.10.1
Phpmyadmin Phpmyadmin	Version 3.4.10.2
Phpmyadmin Phpmyadmin	Version 3.4.11
Phpmyadmin Phpmyadmin	Version 3.4.2.0
Phpmyadmin Phpmyadmin	Version 3.4.3.0
Phpmyadmin Phpmyadmin	Version 3.4.3.1
Phpmyadmin Phpmyadmin	Version 3.4.3.2
Phpmyadmin Phpmyadmin	Version 3.4.4.0
Phpmyadmin Phpmyadmin	Version 3.4.5.0
Phpmyadmin Phpmyadmin	Version 3.4.6.0
Phpmyadmin Phpmyadmin	Version 3.4.7.0
Phpmyadmin Phpmyadmin	Version 3.4.7.1
Phpmyadmin Phpmyadmin	Version 3.4.8.0
Phpmyadmin Phpmyadmin	Version 3.4.9.0
Phpmyadmin Phpmyadmin	Version 3.5.0.0
Phpmyadmin Phpmyadmin	Version 3.5.1.0
Phpmyadmin Phpmyadmin	Version 3.5.2.0
Phpmyadmin Phpmyadmin	Version 3.5.2.1