{"id":"GHSA-5p69-rmx8-7gw7","aliases":["CVE-2011-3592"],"title":"phpMyAdmin Multiple XSS Vulnerabilities","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"LOW","description":"Multiple cross-site scripting (XSS) vulnerabilities in the `PMA_unInlineEditRow` function in js/sql.js in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a (1) database name, (2) table name, or (3) column name that is not properly handled after an inline-editing operation.","severity":"low","score":null,"published":"2022-05-17T04:19:07.000Z","modified":"2024-01-15T18:11:47.040Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"phpmyadmin/phpmyadmin","sources":[{"name":"OSV · GHSA-5p69-rmx8-7gw7","url":"https://osv.dev/vulnerability/GHSA-5p69-rmx8-7gw7"}],"ranges":[{"events":[{"introduced":"3.4.0"},{"fixed":"3.4.5"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["3.4.5"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2011-3592","https://github.com/phpmyadmin/phpmyadmin/commit/2f28ce9c800274190418da0945ce3647d36e1db6","https://github.com/phpmyadmin/phpmyadmin/commit/bda213c58aec44925be661acb0e76c19483ea170","https://bugzilla.redhat.com/show_bug.cgi?id=738681","https://github.com/phpmyadmin/composer","http://www.openwall.com/lists/oss-security/2011/09/30/8","http://www.phpmyadmin.net/home_page/security/PMASA-2011-14.php"],"sources":[{"name":"OSV","id":"GHSA-5p69-rmx8-7gw7","modified":"2024-01-15T18:11:47.040538Z","url":"https://osv.dev/vulnerability/GHSA-5p69-rmx8-7gw7"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T19:20:37.165Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}