{"id":"GHSA-q7v2-w38r-pv7v","aliases":["CVE-2012-4579"],"title":"phpMyAdmin Multiple XSS Vulnerabilities","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"LOW","description":"Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via a Table Operations (1) TRUNCATE or (2) DROP link for a crafted table name, (3) the Add Trigger popup within a Triggers page that references crafted table names, (4) an invalid trigger-creation attempt for a crafted table name, (5) crafted data in a table, or (6) a crafted tooltip label name during GIS data visualization, a different issue than CVE-2012-4345.","severity":"low","score":null,"published":"2022-05-17T05:25:11.000Z","modified":"2023-11-08T03:57:08.072Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"phpmyadmin/phpmyadmin","sources":[{"name":"OSV · GHSA-q7v2-w38r-pv7v","url":"https://osv.dev/vulnerability/GHSA-q7v2-w38r-pv7v"}],"ranges":[{"events":[{"introduced":"3.5"},{"fixed":"3.5.2.2"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["3.5.2.2"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2012-4579","http://www.phpmyadmin.net/home_page/security/PMASA-2012-4.php"],"sources":[{"name":"OSV","id":"GHSA-q7v2-w38r-pv7v","modified":"2023-11-08T03:57:08.072717Z","url":"https://osv.dev/vulnerability/GHSA-q7v2-w38r-pv7v"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-29T00:35:31.531Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}