hitoshura25/cvefixes huggingface dataset:
CVE-2014-4987 (Other, published 2014-07-20T11:12Z)
Description: value: server_user_groups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote authenticated users to bypass intended access restrictions and read the MySQL user list via a viewUsers request.
Severity: MEDIUM (CVSS v3 base score: )
Weakness: CWE-264 \u2014 Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Repository: https://github.com/phpmyadmin/phpmyadmin
Files changed:
ChangeLog
server_user_groups.php
Commit message: bug #4491 [security] Missing validation for accessing User groups feature

Signed-off-by: Marc Delisle <marc@infomarc.info>


Vulnerable code:
?>

Fixed code:
- bug #4491 [security] Missing validation for accessing User groups feature
/**
 * Only allowed to superuser 
 */
if (! $GLOBALS['is_superuser']) {
    $response->addHTML(PMA_Message::error(__('No Privileges'))->getDisplay());
    exit;
}

?>
CVE-2014-5273 (Other, published 2014-08-22T01:55Z)
Description: value: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) browse table page, related to js/sql.js; (2) ENUM editor page, related to js/functions.js; (3) monitor page, related to js/server_status_monitor.js; (4) query charts page, related to js/tbl_chart.js; or (5) table relations page, related to libraries/tbl_relation.lib.php.
Severity: LOW (CVSS v3 base score: )
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/phpmyadmin/phpmyadmin
Files changed:
ChangeLog
js/sql.js
Commit message: bug #4501 [security] XSS in table browse page

Signed-off-by: Marc Delisle <marc@infomarc.info>


Vulnerable code:
        var question = $.sprintf(PMA_messages.strDoYouReally, $(this).closest('td').find('div').text());

Fixed code:
- bug #4501 [security] XSS in table browse page
        var question = $.sprintf(PMA_messages.strDoYouReally, escapeHtml($(this).closest('td').find('div').text()));
CVE-2014-5273 (Other, published 2014-08-22T01:55Z)
Description: value: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) browse table page, related to js/sql.js; (2) ENUM editor page, related to js/functions.js; (3) monitor page, related to js/server_status_monitor.js; (4) query charts page, related to js/tbl_chart.js; or (5) table relations page, related to libraries/tbl_relation.lib.php.
Severity: LOW (CVSS v3 base score: )
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/phpmyadmin/phpmyadmin
Files changed:
ChangeLog
js/tbl_chart.js
Commit message: bug #4504 [security] Self-XSS in query charts

Signed-off-by: Marc Delisle <marc@infomarc.info>


Vulnerable code:
                label : settings.xaxisLabel

Fixed code:
- bug #4504 [security] Self-XSS in query charts
                label : escapeHtml(settings.xaxisLabel)
CVE-2014-5273 (Other, published 2014-08-22T01:55Z)
Description: value: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) browse table page, related to js/sql.js; (2) ENUM editor page, related to js/functions.js; (3) monitor page, related to js/server_status_monitor.js; (4) query charts page, related to js/tbl_chart.js; or (5) table relations page, related to libraries/tbl_relation.lib.php.
Severity: LOW (CVSS v3 base score: )
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/phpmyadmin/phpmyadmin
Files changed:
ChangeLog
libraries/tbl_relation.lib.php
Commit message: bug #4517 [security] XSS in relation view

Signed-off-by: Marc Delisle <marc@infomarc.info>


Vulnerable code:
            . ' value="' . $constraint_name . '"/>';

Fixed code:
- bug #4517 [security] XSS in relation view
            . ' value="' . htmlspecialchars($constraint_name) . '"/>';
CVE-2014-5273 (Other, published 2014-08-22T01:55Z)
Description: value: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) browse table page, related to js/sql.js; (2) ENUM editor page, related to js/functions.js; (3) monitor page, related to js/server_status_monitor.js; (4) query charts page, related to js/tbl_chart.js; or (5) table relations page, related to libraries/tbl_relation.lib.php.
Severity: LOW (CVSS v3 base score: )
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/phpmyadmin/phpmyadmin
Files changed:
ChangeLog
js/server_status_monitor.js
Commit message: bug #4503 [security] Self-XSSes in monitor

Signed-off-by: Marc Delisle <marc@infomarc.info>


Vulnerable code:
        $('#seriesPreview').append('- ' + newSeries.label + str + '<br/>');

Fixed code:
- bug #4503 [security] Self-XSSes in monitor
        $('#seriesPreview').append('- ' + escapeHtml(newSeries.label + str) + '<br/>');
CVE-2014-5273 (Other, published 2014-08-22T01:55Z)
Description: value: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) browse table page, related to js/sql.js; (2) ENUM editor page, related to js/functions.js; (3) monitor page, related to js/server_status_monitor.js; (4) query charts page, related to js/tbl_chart.js; or (5) table relations page, related to libraries/tbl_relation.lib.php.
Severity: LOW (CVSS v3 base score: )
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/phpmyadmin/phpmyadmin
Files changed:
ChangeLog
js/functions.js
Commit message: bug #4502 [security] Self-XSS in enum value editor

Signed-off-by: Marc Delisle <marc@infomarc.info>


Vulnerable code:
                '"' + decodeURIComponent(colname) + '"'

Fixed code:
- bug #4502 [security] Self-XSS in enum value editor
                '"' + escapeHtml(decodeURIComponent(colname)) + '"'
CVE-2014-5274 (Other, published 2014-08-22T01:55Z)
Description: value: Cross-site scripting (XSS) vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js.
Severity: LOW (CVSS v3 base score: )
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/phpmyadmin/phpmyadmin
Files changed:
ChangeLog
js/functions.js
Commit message: bug #4505 [security] XSS in view operations page

Signed-off-by: Marc Delisle <marc@infomarc.info>


Vulnerable code:
            'DROP VIEW ' + PMA_commonParams.get('table')

Fixed code:
4.2.7.1 (2014-08-17)
- bug #4505 [security] XSS in view operations page

            'DROP VIEW ' + escapeHtml(PMA_commonParams.get('table'))
CVE-2014-7217 (PHP, published 2014-10-03T01:55Z)
Description: value: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.4, 4.1.x before 4.1.14.5, and 4.2.x before 4.2.9.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted ENUM value that is improperly handled during rendering of the (1) table search or (2) table structure page, related to libraries/TableSearch.class.php and libraries/Util.class.php.
Severity: LOW (CVSS v3 base score: )
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/phpmyadmin/phpmyadmin
Files changed:
libraries/TableSearch.class.php
libraries/Util.class.php
Commit message: [security] XSS with malicious ENUM values

Signed-off-by: Marc Delisle <marc@infomarc.info>

Conflicts:
	libraries/Util.class.php


Vulnerable code:
            $html_output .= '<td>' . $properties['type'] . '</td>';
                . ' value="' . htmlspecialchars($this->_columnNames[$column_index])
                . ' value="' . $this->_columnTypes[$column_index] . '" />';
            $displayed_type  = '<abbr title="' . $printtype . '">';
            $displayed_type .= $GLOBALS['PMA_String']->substr(
                $printtype, 0, $GLOBALS['cfg']['LimitChars']

Fixed code:
        $column_type = htmlspecialchars($column_type);
            $html_output .= '<td>'
                . htmlspecialchars($properties['type'])
                . '</td>';
                . ' value="'
                . htmlspecialchars($this->_columnNames[$column_index])
                . ' value="'
                . htmlspecialchars($this->_columnTypes[$column_index]) . '" />';
            $displayed_type  = '<abbr title="'
                . htmlspecialchars($printtype) . '">';
            $displayed_type .= htmlspecialchars(
                $GLOBALS['PMA_String']->substr(
                    $printtype, 0, $GLOBALS['cfg']['LimitChars']
                )
CVE-2014-7217 (PHP, published 2014-10-03T01:55Z)
Description: value: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.4, 4.1.x before 4.1.14.5, and 4.2.x before 4.2.9.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted ENUM value that is improperly handled during rendering of the (1) table search or (2) table structure page, related to libraries/TableSearch.class.php and libraries/Util.class.php.
Severity: LOW (CVSS v3 base score: )
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/phpmyadmin/phpmyadmin
Files changed:
libraries/TableSearch.class.php
Commit message: Bug 4544: additional fix for 4.2.x

Signed-off-by: Marc Delisle <marc@infomarc.info>


Vulnerable code:
            $html_output .= '<td data-type="' . $properties['type'] . '"'

Fixed code:
            $html_output .= '<td data-type="'
                . htmlspecialchars($properties['type']) . '"'
CVE-2014-8326 (Other, published 2014-11-05T11:55Z)
Description: value: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database name or (2) table name, related to the libraries/DatabaseInterface.class.php code for SQL debug output and the js/server_status_monitor.js code for the server monitor page.
Severity: LOW (CVSS v3 base score: )
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/phpmyadmin/phpmyadmin
Files changed:
ChangeLog
libraries/DatabaseInterface.class.php
Commit message: bug #4562 [security] XSS in debug SQL output

Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>


Vulnerable code:
                    = '<b style="color:red">' . mysqli_error($link) . '</b>';
            $_SESSION['debug']['queries'][$hash]['query'] = $query;

Fixed code:
4.2.10.1 (not yet released)
- bug #4562 [security] XSS in debug SQL output

                    = '<b style="color:red">'
                        . htmlspecialchars(mysqli_error($link)) . '</b>';
            $_SESSION['debug']['queries'][$hash]['query'] = htmlspecialchars($query);
CVE-2014-8326 (Other, published 2014-11-05T11:55Z)
Description: value: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database name or (2) table name, related to the libraries/DatabaseInterface.class.php code for SQL debug output and the js/server_status_monitor.js code for the server monitor page.
Severity: LOW (CVSS v3 base score: )
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/phpmyadmin/phpmyadmin
Files changed:
ChangeLog
js/server_status_monitor.js
Commit message: bug #4563 [security] XSS in monitor query analyzer

Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>


Vulnerable code:
            return value;
                    value = (value === null) ? 'null' : value;

Fixed code:
- bug #4563 [security] XSS in monitor query analyzer
            return escapeHtml(value);
                    value = (value === null) ? 'null' : escapeHtml(value);
CVE-2014-8958 (PHP, published 2014-11-30T11:59Z)
Description: value: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database, (2) table, or (3) column name that is improperly handled during rendering of the table browse page; a crafted ENUM value that is improperly handled during rendering of the (4) table print view or (5) zoom search page; or (6) a crafted pma_fontsize cookie that is improperly handled during rendering of the home page.
Severity: MEDIUM (CVSS v3 base score: )
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/phpmyadmin/phpmyadmin
Files changed:
ChangeLog
libraries/Config.class.php
libraries/Theme.class.php
Commit message: bug #4597 [security] XSS through pma_fontsize cookie

Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>


Vulnerable code:
                $current_size = $_COOKIE['pma_fontsize'];
            return $_COOKIE['pma_fontsize'];

Fixed code:
- bug #4597 [security] XSS through pma_fontsize cookie
                $current_size = htmlspecialchars($_COOKIE['pma_fontsize']);
            return htmlspecialchars($_COOKIE['pma_fontsize']);
CVE-2014-8958 (Other, published 2014-11-30T11:59Z)
Description: value: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database, (2) table, or (3) column name that is improperly handled during rendering of the table browse page; a crafted ENUM value that is improperly handled during rendering of the (4) table print view or (5) zoom search page; or (6) a crafted pma_fontsize cookie that is improperly handled during rendering of the home page.
Severity: MEDIUM (CVSS v3 base score: )
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/phpmyadmin/phpmyadmin
Files changed:
ChangeLog
libraries/mult_submits.lib.php
Commit message: bug #4598 [security] XSS in multi submit

Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>


Vulnerable code:
            $full_query .= 'DELETE FROM ' . PMA_Util::backquote($db)
                . '.' . PMA_Util::backquote($table)
                . ' WHERE ' . urldecode($sval)

Fixed code:
- bug #4598 [security] XSS in multi submit
            $full_query .= 'DELETE FROM '
                . PMA_Util::backquote(htmlspecialchars($db))
                . '.' . PMA_Util::backquote(htmlspecialchars($table))
                . ' WHERE ' . urldecode(htmlspecialchars($sval))
CVE-2014-8958 (Other, published 2014-11-30T11:59Z)
Description: value: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database, (2) table, or (3) column name that is improperly handled during rendering of the table browse page; a crafted ENUM value that is improperly handled during rendering of the (4) table print view or (5) zoom search page; or (6) a crafted pma_fontsize cookie that is improperly handled during rendering of the home page.
Severity: MEDIUM (CVSS v3 base score: )
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/phpmyadmin/phpmyadmin
Files changed:
ChangeLog
tbl_zoom_select.php
Commit message: bug #4579 [security] XSS vulnerability in zoom search page

Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>


Vulnerable code:
    $response->addJSON('field_type', $properties['type']);

Fixed code:
- bug #4579 [security] XSS vulnerability in zoom search page
    $response->addJSON('field_type', htmlspecialchars($properties['type']));
CVE-2014-8958 (Other, published 2014-11-30T11:59Z)
Description: value: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database, (2) table, or (3) column name that is improperly handled during rendering of the table browse page; a crafted ENUM value that is improperly handled during rendering of the (4) table print view or (5) zoom search page; or (6) a crafted pma_fontsize cookie that is improperly handled during rendering of the home page.
Severity: MEDIUM (CVSS v3 base score: )
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/phpmyadmin/phpmyadmin
Files changed:
ChangeLog
libraries/tbl_printview.lib.php
Commit message: bug #4578 [security] XSS vulnerability in table print view

Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>


Vulnerable code:
        $html .= '<td>' . $type . '<bdo dir="ltr"></bdo></td>';

Fixed code:
- bug #4578 [security] XSS vulnerability in table print view
        $html .= '<td>' . htmlspecialchars($type) . '<bdo dir="ltr"></bdo></td>';
CVE-2014-8959 (Other, published 2014-11-30T11:59Z)
Description: value: Directory traversal vulnerability in libraries/gis/GIS_Factory.class.php in the GIS editor in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allows remote authenticated users to include and execute arbitrary local files via a crafted geometry-type parameter.
Severity: MEDIUM (CVSS v3 base score: )
Weakness: CWE-22 \u2014 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Repository: https://github.com/phpmyadmin/phpmyadmin
Files changed:
ChangeLog
libraries/gis/GIS_Factory.class.php
Commit message: bug #4594 [security] Path traversal in file inclusion of GIS factory

Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>


Vulnerable code:
        if (! file_exists('./libraries/gis/GIS_' . ucfirst($type_lower) . '.class.php')) {

Fixed code:
- bug #4594 [security] Path traversal in file inclusion of GIS factory
        if (! PMA_isValid($type_lower, PMA_Util::getGISDatatypes())
            || ! file_exists('./libraries/gis/GIS_' . ucfirst($type_lower) . '.class.php')
        ) {
CVE-2014-8960 (Other, published 2014-11-30T11:59Z)
Description: value: Cross-site scripting (XSS) vulnerability in libraries/error_report.lib.php in the error-reporting feature in phpMyAdmin 4.1.x before 4.1.14.7 and 4.2.x before 4.2.12 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename.
Severity: LOW (CVSS v3 base score: )
Weakness: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Repository: https://github.com/phpmyadmin/phpmyadmin
Files changed:
ChangeLog
libraries/error_report.lib.php
Commit message: bug #4596 [security] XSS through exception stack

Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>


Vulnerable code:
            . PMA_getReportData()

Fixed code:
- bug #4596 [security] XSS through exception stack
            . htmlspecialchars(PMA_getReportData())