https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 31 Oct 2026 22:29:35 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-119563 <p>phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privilege to inject script via unescaped table names in DesignerHistory.display(). Attackers can create a table whose name contains HTML markup that executes in another user&#39;s session when they add a condition on it in Designer query mode.</p> <p>phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privilege to inject script via unescaped table names in DesignerHistory.display(). Attackers can create a table whose name contains HTML markup that executes in another user&#39;s session when they add a condition on it in Designer query mode.</p> https://db.gcve.eu/vuln/fkie_cve-2026-119563 https://db.gcve.eu/vuln/ghsa-v39r-w56f-c874 <p>phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privilege to inject script via unescaped table names in DesignerHistory.display(). Attackers can create a table whose name contains HTML markup that executes in another user&#39;s session when they add a condition on it in Designer query mode.</p> <p>phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privilege to inject script via unescaped table names in DesignerHistory.display(). Attackers can create a table whose name contains HTML markup that executes in another user&#39;s session when they add a condition on it in Designer query mode.</p> https://db.gcve.eu/vuln/ghsa-v39r-w56f-c874