CVE-2016-2559

Published: Mar 1, 2016Modified: May 6, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the format function in libraries/sql-parser/src/Utils/Error.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query.

Affected (13)

Products: Phpmyadmin: Phpmyadmin

Phpmyadmin

1 product

Phpmyadmin

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 4.5.0.1
Phpmyadmin Phpmyadmin	Version 4.5.0.2
Phpmyadmin Phpmyadmin	Version 4.5.0
Phpmyadmin Phpmyadmin	Version 4.5.0 beta1
Phpmyadmin Phpmyadmin	Version 4.5.0 beta2
Phpmyadmin Phpmyadmin	Version 4.5.0 rc1
Phpmyadmin Phpmyadmin	Version 4.5.1
Phpmyadmin Phpmyadmin	Version 4.5.2
Phpmyadmin Phpmyadmin	Version 4.5.3.1
Phpmyadmin Phpmyadmin	Version 4.5.3
Phpmyadmin Phpmyadmin	Version 4.5.4.1
Phpmyadmin Phpmyadmin	Version 4.5.4
Phpmyadmin Phpmyadmin	Version 4.5.5