Security Advisory

CVE-2013-5001

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2013-07-30 18:00:00
Last updated 2024-09-16 22:14:41
Assigner mitre
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in libraries/plugins/transformations/abstract/TextLinkTransformationsPlugin.class.php in phpMyAdmin 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted object name associated with a TextLinkTransformationPlugin link.