What’s Vulnerable › Vulnerabilities

CVE-2019-1000004

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-02-04 · updated 2026-06-17
• Weakness: CWE-79

Description

yugandhargangu JspMyAdmin2 version 1.0.6 and earlier contains a Cross Site Scripting (XSS) vulnerability in sidebar and table data that can result in Database fields aren't properly sanitized and allow code injection (Cross-Site Scripting). This attack appears to be exploitable via the payload needs to be stored in the database and the victim must see the db value in question.

Affected products

• Jspmyadmin2: through 1.0.6

References

• https://github.com/yugandhargangu/JspMyAdmin2/issues/22
• https://github.com/yugandhargangu/JspMyAdmin2/issues/22

Get alerted when CVE-2019-1000004 or the next vulnerability affects your stack