CVE-2017-1000005

MEDIUM

phpminiadmin 1.9.160630 - Stored Cross-Site Scripting in Database Table and Column Names

Title source: llm
STIX 2.1

Description

PHPMiniAdmin version 1.9.160630 is vulnerable to stored XSS in the name of databases, tables and columns resulting in potential account takeover and scraping of data (stealing data).

References (1)

Core 1
Core References

Scores

CVSS v3 6.1
EPSS 0.0072
EPSS Percentile 50.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
phpminiadmin_project/phpminiadmin 1.9.160930
Published Jul 17, 2017
Tracked Since Feb 18, 2026