CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-1937

Multiple cross-site scripting (XSS) vulnerabilities in tbl_gis_visualization.php in phpMyAdmin 3.5.x before 3.5.8 might allow remote attackers to inject arbitrary web script or HTML via the (1) visualizationSettings[width] or (2) visualizationSettings[height] parameter. NOTE: a third party reports that this is "not exploitable.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.081

EPSS Ranking 91.8%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2013-1937

Phpmyadmin » Phpmyadmin » Version: 2.9.0

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0
Phpmyadmin » Phpmyadmin » Version: 2.9.1

cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1
Phpmyadmin » Phpmyadmin » Version: 3.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0
Phpmyadmin » Phpmyadmin » Version: 3.0.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1
Phpmyadmin » Phpmyadmin » Version: 3.1.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1
Phpmyadmin » Phpmyadmin » Version: 3.1.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2
Phpmyadmin » Phpmyadmin » Version: 3.1.3

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3
Phpmyadmin » Phpmyadmin » Version: 3.1.5

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5
Phpmyadmin » Phpmyadmin » Version: 3.2.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0
Phpmyadmin » Phpmyadmin » Version: 3.2.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.1
Phpmyadmin » Phpmyadmin » Version: 3.2.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.2
Phpmyadmin » Phpmyadmin » Version: 3.5.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.0.0
Phpmyadmin » Phpmyadmin » Version: 3.5.1.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.1.0
Phpmyadmin » Phpmyadmin » Version: 3.5.2.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.2.0
Phpmyadmin » Phpmyadmin » Version: 3.5.2.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.2.1
Phpmyadmin » Phpmyadmin » Version: 3.5.2.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.2.2
Phpmyadmin » Phpmyadmin » Version: 3.5.3.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.3.0
Phpmyadmin » Phpmyadmin » Version: 3.5.4

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.4
Phpmyadmin » Phpmyadmin » Version: 3.5.5

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.5
Phpmyadmin » Phpmyadmin » Version: 3.5.6

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.6
Phpmyadmin » Phpmyadmin » Version: 3.5.7

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.7
Phpmyadmin » Phpmyadmin » Version: 3.5.8

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-1937

Products

Pricing

Contact Us