Phpmyadmin · Phpmyadmin · CVE-2013-5002
**Name of the Vulnerable Software and Affected Versions**
phpMyAdmin versions 3.5.x through 3.5.8.1
phpMyAdmin versions 4.0.x through 4.0.4.1
**Description**
A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted `pageNumber` value to "schema export.php".
**Recommendations**
For phpMyAdmin versions 3.5.x through 3.5.8.1, update to version 3.5.8.2 or later.
For phpMyAdmin versions 4.0.x through 4.0.4.1, update to version 4.0.4.2 or later.