Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the table parameter.
Severity
Medium 5.8
Published
6 Jul 2006
Last changed
16 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
1.8% in the next 30 daysHigher than 78% of CVEs. EPSS by FIRST, 12 Nov 2026
Attack
Over the network · No login needed
Attacker can
Read some data · Change some data
CVSS vector
AV:N/AC:M/Au:N/C:P/I:P/A:N
Sources
NVD
Affected software
Software
Affected versions
phpMyAdminServers and applications · cpe:a:phpmyadmin:phpmyadmin