Packagist/phpmyadmin/phpmyadmin CVE-2014-8326: medium, EPSS 1.53%
phpMyAdmin Implementation XSS Vulnerability on Server Monitor Page
Action: Upgrade phpmyadmin/phpmyadmin to 4.0.10.5 or later.
composer require phpmyadmin/phpmyadmin:4.0.10.5composer require phpmyadmin/phpmyadmin:4.1.14.6composer require phpmyadmin/phpmyadmin:4.2.10.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.0.10.5 | - |
| 4.1.0 | 4.1.14.6 | - |
| 4.2.0 | 4.2.10.1 | - |
Fixed versions
| 4.0.10.5 | 4.1.14.6 | 4.2.10.1 |
Sources
- osv: GHSA-pvr5-84gr-g985
- https://nvd.nist.gov/vuln/detail/CVE-2014-8326
- https://github.com/phpmyadmin/phpmyadmin/commit/7b8962dede7631298c81e2c1cd267b81f1e08a8c
- https://github.com/phpmyadmin/phpmyadmin/commit/bd68c54d1beeef79d237e8bfda44690834012a76
- https://web.archive.org/web/20200228163625/http://www.securityfocus.com/bid/70731
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00004.html
- http://www.phpmyadmin.net/home_page/security/PMASA-2014-12.php
CVE-2014-8326 · published · modified · JSON