Cross-site scripting (XSS) vulnerability in phpMyAdmin's Create View page (view_create.php) in versions before 4.0.3

CVE-2013-3742 · LOW Severity

AV:N/AC:M/AU:S/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in view_create.php (aka the Create View page) in phpMyAdmin 4.x before 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via an invalid SQL CREATE VIEW statement with a crafted name that triggers an error message.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.