CVE-2012-4579: phpMyAdmin Multiple XSS Vulnerabilities
3.5
CVSS Score
Basic Information
CVE ID
GHSA ID
EPSS Score
0.40767%
CWE
Published
5/17/2022
Updated
8/29/2023
KEV Status
No
Technology
PHP
Technical Details
CVSS Vector
AV:N/AC:M/Au:S/C:N/I:P/A:N
Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
---|---|---|---|
phpmyadmin/phpmyadmin | composer | >= 3.5, < 3.5.2.2 | 3.5.2.2 |
Vulnerability Intelligence
Miggo AI
Root Cause Analysis
The provided vulnerability descriptions and advisories reference multiple XSS vectors related to table operations, triggers, and GIS visualization, but they do not explicitly name specific functions or file paths. While the phpMyAdmin
security notice (PMASA-2012-4) lists commit hashes for patches, the actual code changes and affected functions cannot be analyzed without access to the commit diffs or source code. The vulnerability stems from insufficient output encoding of user-controlled inputs (e.g., table names) in various UI components, but mapping these to specific functions requires direct inspection of the patched code, which is unavailable here. Thus, no functions can be identified with high confidence.