CVE-2023-25727
13.02.2023, 06:15
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
| Vendor | Product | Version |
|---|---|---|
| phpmyadmin | phpmyadmin | 𝑥 < 4.9.11 |
| phpmyadmin | phpmyadmin | 5.0.0 ≤ 𝑥 < 5.2.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases