CVE-2014-7217

Published: Oct 3, 2014Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.4, 4.1.x before 4.1.14.5, and 4.2.x before 4.2.9.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted ENUM value that is improperly handled during rendering of the (1) table search or (2) table structure page, related to libraries/TableSearch.class.php and libraries/Util.class.php.

Affected (43)

Products: Phpmyadmin: Phpmyadmin

Phpmyadmin

1 product

Phpmyadmin

Configuration A

43 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 4.0.0
Phpmyadmin Phpmyadmin	Version 4.0.0 rc2
Phpmyadmin Phpmyadmin	Version 4.0.0 rc3
Phpmyadmin Phpmyadmin	Version 4.0.1
Phpmyadmin Phpmyadmin	Version 4.0.2
Phpmyadmin Phpmyadmin	Version 4.0.3
Phpmyadmin Phpmyadmin	Version 4.0.4.1
Phpmyadmin Phpmyadmin	Version 4.0.4.2
Phpmyadmin Phpmyadmin	Version 4.0.4
Phpmyadmin Phpmyadmin	Version 4.0.5
Phpmyadmin Phpmyadmin	Version 4.0.6
Phpmyadmin Phpmyadmin	Version 4.0.7
Phpmyadmin Phpmyadmin	Version 4.0.8
Phpmyadmin Phpmyadmin	Version 4.0.9
Phpmyadmin Phpmyadmin	Version 4.1.0
Phpmyadmin Phpmyadmin	Version 4.1.10
Phpmyadmin Phpmyadmin	Version 4.1.11
Phpmyadmin Phpmyadmin	Version 4.1.12
Phpmyadmin Phpmyadmin	Version 4.1.13
Phpmyadmin Phpmyadmin	Version 4.1.14.1
Phpmyadmin Phpmyadmin	Version 4.1.14.3
Phpmyadmin Phpmyadmin	Version 4.1.14.4
Phpmyadmin Phpmyadmin	Version 4.1.14
Phpmyadmin Phpmyadmin	Version 4.1.1
Phpmyadmin Phpmyadmin	Version 4.1.2
Phpmyadmin Phpmyadmin	Version 4.1.3
Phpmyadmin Phpmyadmin	Version 4.1.4
Phpmyadmin Phpmyadmin	Version 4.1.5
Phpmyadmin Phpmyadmin	Version 4.1.6
Phpmyadmin Phpmyadmin	Version 4.1.7
Phpmyadmin Phpmyadmin	Version 4.1.8
Phpmyadmin Phpmyadmin	Version 4.1.9
Phpmyadmin Phpmyadmin	Version 4.2.0
Phpmyadmin Phpmyadmin	Version 4.2.1
Phpmyadmin Phpmyadmin	Version 4.2.2
Phpmyadmin Phpmyadmin	Version 4.2.3
Phpmyadmin Phpmyadmin	Version 4.2.4
Phpmyadmin Phpmyadmin	Version 4.2.5
Phpmyadmin Phpmyadmin	Version 4.2.7.1
Phpmyadmin Phpmyadmin	Version 4.2.7
Phpmyadmin Phpmyadmin	Version 4.2.8.1
Phpmyadmin Phpmyadmin	Version 4.2.8
Phpmyadmin Phpmyadmin	Version 4.2.9