QwikSec

Security Database

CVE

CWE

Training

CVE-2016-2559

Published: Mar 1, 2016

Modified: Aug 5, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the format function in libraries/sql-parser/src/Utils/Error.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.phpmyadmin.net/security/PMASA-2016-10/

x_refsource_CONFIRM

FEDORA-2016-65da02b95c

vendor-advisory

x_refsource_FEDORA

https://github.com/phpmyadmin/phpmyadmin/commit/3a6a9a807d99371ee126635e1a505fc1fe0df32c

x_refsource_CONFIRM

FEDORA-2016-02ee5b4002

vendor-advisory

x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.