VDB

GCVE-110-MAGEIA-2014-383

GCVE-110-MAGEIA-2014-383
Advisory Published
Vulnetix · Advisory published September 22, 2014
Updated phpmyadmin package fixes security vulnerability: In phpMyAdmin before 4.1.14.4, by deceiving a logged-in user to click on a crafted URL, it is possible to perform remote code execution and in some cases, create a root account due to a DOM based XSS vulnerability in the micro history feature (CVE-2014-6300).

Affected Products

VendorProductVersionsPlatforms
Mageiaphpmyadmin0 (affected), 4.1.14.4-1.mga3 (unaffected)
Mageiaphpmyadmin0 (affected), 4.1.14.4-1.mga4 (unaffected)

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›