CVE-2012-4345

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-08-21 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Database Structure page in phpMyAdmin 3.4.x before 3.4.11.1 and 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) a crafted table name during table creation, or a (2) Empty link or (3) Drop link for a crafted table name.

Affected products

phpMyAdmin: 3.4.0.0, 3.4.1.0, 3.4.2.0, 3.4.3.0, 3.4.3.1, 3.4.3.2 (+15)

References

http://www.mandriva.com/security/advisories?name=MDVSA-2012:136
http://www.phpmyadmin.net/home_page/security/PMASA-2012-4.php
https://hermes.opensuse.org/messages/15513071
http://www.mandriva.com/security/advisories?name=MDVSA-2012:136
http://www.phpmyadmin.net/home_page/security/PMASA-2012-4.php
https://hermes.opensuse.org/messages/15513071

Get alerted when CVE-2012-4345 or the next vulnerability affects your stack