CVE-2016-5705: Opensuse Leap

Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) server-privileges certificate data fields on the user privileges page, (2) an "invalid JSON" error message in the error console, (3) a database name in the central columns implementation, (4) a group name, or (5) a search name in the bookmarks implementation.

Affected products

• Opensuse Leap: version 42.1 only
• Opensuse Opensuse: version 13.1 only; version 13.2 only
• phpMyAdmin phpMyAdmin: version 4.6.0 only; version 4.6.1 only; version 4.6.2 only; version 4.4.0 only; version 4.4.1 only; version 4.4.1.1 only; …

Published 2016-07-03. Last modified 2026-06-17.