Dieter Adriaenssens

2 exploits Active since Apr 2013

CVE-2013-1937 WRITEUP MEDIUM WRITEUP

phpMyAdmin < 3.5.8 - Cross-Site Scripting via visualizationSettings Parameters

Multiple cross-site scripting (XSS) vulnerabilities in tbl_gis_visualization.php in phpMyAdmin 3.5.x before 3.5.8 might allow remote attackers to inject arbitrary web script or HTML via the (1) visualizationSettings[width] or (2) visualizationSettings[height] parameter. NOTE: a third party reports that this is "not exploitable.

CVSS 6.1

View Code

CVE-2013-3742 WRITEUP WRITEUP

phpMyAdmin 4.x < 4.0.3 - Authenticated Cross-Site Scripting via Create View Error Message

Cross-site scripting (XSS) vulnerability in view_create.php (aka the Create View page) in phpMyAdmin 4.x before 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via an invalid SQL CREATE VIEW statement with a crafted name that triggers an error message.

View Code