CVE-2014-5274

Published: Aug 22, 2014Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js.

Affected (27)

Products: Phpmyadmin: Phpmyadmin · Opensuse: Opensuse

1 product

1 product

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 4.1.0
Phpmyadmin Phpmyadmin	Version 4.1.10
Phpmyadmin Phpmyadmin	Version 4.1.11
Phpmyadmin Phpmyadmin	Version 4.1.12
Phpmyadmin Phpmyadmin	Version 4.1.13
Phpmyadmin Phpmyadmin	Version 4.1.14.1
Phpmyadmin Phpmyadmin	Version 4.1.14.2
Phpmyadmin Phpmyadmin	Version 4.1.14
Phpmyadmin Phpmyadmin	Version 4.1.1
Phpmyadmin Phpmyadmin	Version 4.1.2
Phpmyadmin Phpmyadmin	Version 4.1.3
Phpmyadmin Phpmyadmin	Version 4.1.4
Phpmyadmin Phpmyadmin	Version 4.1.5
Phpmyadmin Phpmyadmin	Version 4.1.6
Phpmyadmin Phpmyadmin	Version 4.1.7
Phpmyadmin Phpmyadmin	Version 4.1.8
Phpmyadmin Phpmyadmin	Version 4.1.9

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 4.2.0
Phpmyadmin Phpmyadmin	Version 4.2.1
Phpmyadmin Phpmyadmin	Version 4.2.2
Phpmyadmin Phpmyadmin	Version 4.2.3
Phpmyadmin Phpmyadmin	Version 4.2.4
Phpmyadmin Phpmyadmin	Version 4.2.5
Phpmyadmin Phpmyadmin	Version 4.2.6
Phpmyadmin Phpmyadmin	Version 4.2.7