CVE-2019-1000004

Published: Feb 4, 2019Modified: Jun 17, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

yugandhargangu JspMyAdmin2 version 1.0.6 and earlier contains a Cross Site Scripting (XSS) vulnerability in sidebar and table data that can result in Database fields aren't properly sanitized and allow code injection (Cross-Site Scripting). This attack appears to be exploitable via the payload needs to be stored in the database and the victim must see the db value in question.

Affected (1)

Products: Jspmyadmin: Jspmyadmin2

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jspmyadmin Jspmyadmin2	Up to 1.0.6

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://github.com/yugandhargangu/JspMyAdmin2/issues/22

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://github.com/yugandhargangu/JspMyAdmin2/issues/22

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

Timeline

No history available yet.