This script is Copyright (C) 2012-2015 Tenable Network Security, Inc.
The remote web server hosts a PHP application that is affected by a
cross-site scripting vulnerability.
According to its self-identified version number, the phpMyAdmin
install hosted on the remote web server is affected by a cross-site
The vulnerability is in the replication-setup functionality in
js/replication.js in phpMyAdmin 3.4.x before 18.104.22.168, which allows
user-assisted remote attackers to inject arbitrary web script or HTML
via a crafted database name.
See also :
Upgrade to phpMyAdmin 22.214.171.124 or later or apply the patch from the
Risk factor :
Medium / CVSS Base Score : 4.3
CVSS Temporal Score : 3.6
Public Exploit Available : true
Family: CGI abuses : XSS
Nessus Plugin ID: 59171 ()
Bugtraq ID: 52857
CVE ID: CVE-2012-1190
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.