-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from unescaped output of the TABLE_COMMENT field in the table structure template. The commit diff shows the fix adds htmlspecialchars() to sanitize this output. The original code (<?= $showtable['TABLE_COMMENT'] ?>) directly renders user-controlled database comments into HTML without sanitization, making it susceptible to XSS. This template line represents the vulnerable code path, though it's not a traditional function in the codebase.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| phpmyadmin/phpmyadmin | composer | >= 4.6.0, < 4.6.3 | 4.6.3 |
PHPPHPKEV Misses 88% of Exploited CVEs- Get the report