{"id":"CVE-2014-4955","details":"Cross-site scripting (XSS) vulnerability in the PMA_TRI_getRowForList function in libraries/rte/rte_list.lib.php in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6 allows remote authenticated users to inject arbitrary web script or HTML via a crafted trigger name that is improperly handled on the database triggers page.","modified":"2026-04-16T01:40:41.423381223Z","published":"2014-07-20T11:12:51Z","withdrawn":"2026-01-27T04:12:49.956515Z","related":["openSUSE-SU-2024:10054-1"],"references":[{"type":"ADVISORY","url":"http://secunia.com/advisories/60397"},{"type":"ADVISORY","url":"http://www.phpmyadmin.net/home_page/security/PMASA-2014-5.php"},{"type":"FIX","url":"https://github.com/phpmyadmin/phpmyadmin/commit/10014d4dc596b9e3a491bf04f3e708cf1887d5e1"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00045.html"},{"type":"WEB","url":"http://www.securityfocus.com/bid/68799"}],"schema_version":"1.7.3"}