https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 06:16:05 +0000 https://cve.radiocsirt.org/vuln/certfr-2014-avi-386 certfr-2014-avi-386 https://cve.radiocsirt.org/vuln/certfr-2014-avi-386 https://cve.radiocsirt.org/vuln/euvd-2026-101460 EUVD-2026-101460 https://cve.radiocsirt.org/vuln/euvd-2026-101460 https://cve.radiocsirt.org/vuln/fkie_cve-2014-6300 <p>Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery (CSRF) attack to create a root account, via a crafted URL, related to js/ajax.js.</p> <p>Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery (CSRF) attack to create a root account, via a crafted URL, related to js/ajax.js.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-6300 https://cve.radiocsirt.org/vuln/ghsa-6wfj-2mw7-p5cg <p><strong>Affected:</strong> Packagist: phpmyadmin/phpmyadmin</p> <p>Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery (CSRF) attack to create a root account, via a crafted URL, related to js/ajax.js.</p> <p><strong>Affected:</strong> Packagist: phpmyadmin/phpmyadmin</p> <p>Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery (CSRF) attack to create a root account, via a crafted URL, related to js/ajax.js.</p> https://cve.radiocsirt.org/vuln/ghsa-6wfj-2mw7-p5cg https://cve.radiocsirt.org/vuln/gsd-2014-6300 gsd-2014-6300 https://cve.radiocsirt.org/vuln/gsd-2014-6300 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10054-1 <p>phpMyAdmin-4.6.5.2-1.1 on GA media</p> <p>phpMyAdmin-4.6.5.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10054-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-6300 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: phpmyadmin</p> <p>Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery (CSRF) attack to create a root account, via a crafted URL, related to js/ajax.js.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: phpmyadmin</p> <p>Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery (CSRF) attack to create a root account, via a crafted URL, related to js/ajax.js.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-6300