CVE-2012-5339: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.3 allow remote authentic...

Security readout for executives and security teams

This issue affects older phpMyAdmin 3.5.x installations before 3.5.3. An authenticated user could store script content in database object names so phpMyAdmin later displays it as executable browser content. Business risk depends on whether legacy phpMyAdmin is still reachable and who can authenticate. Exposure is likely limited to organizations still running phpMyAdmin 3.5.x before 3.5.3. Risk increases where phpMyAdmin is internet-accessible, shared by multiple database users, or still present on legacy hosting panels. Treat this as a legacy exposure cleanup item unless a vulnerable phpMyAdmin instance is reachable by untrusted users. Publicly exposed or shared administrative portals should be prioritized because XSS in a database administration interface can affect privileged sessions. Mitigation focus: Upgrade phpMyAdmin to 3.5.3 or later, following vendor guidance.; Remove or isolate obsolete phpMyAdmin deployments from public networks.; Restrict phpMyAdmin access to trusted administrators and management networks..

Prepared

Jun 24, 2026, 19:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.