Feed/CVE-2014-8960
CVE-2014-8960LOWCVSS 3.5

CVE-2014-8960

Published Nov 30, 2014·Updated Jun 16, 2026

NVD Description

Cross-site scripting (XSS) vulnerability in libraries/error_report.lib.php in the error-reporting feature in phpMyAdmin 4.1.x before 4.1.14.7 and 4.2.x before 4.2.12 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename.

CVSS Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free