{"id":"CVE-2016-5732","details":"Multiple cross-site scripting (XSS) vulnerabilities in the partition-range implementation in templates/table/structure/display_partitions.phtml in the table-structure page in phpMyAdmin 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via crafted table parameters.","aliases":["GHSA-3q28-xfw3-2q35"],"modified":"2026-07-08T12:41:20.491585Z","published":"2016-07-03T01:59:22.627Z","related":["openSUSE-SU-2024:10054-1"],"references":[{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201701-32"},{"type":"FIX","url":"https://github.com/phpmyadmin/phpmyadmin/commit/0815af37f483f329f0c0565d68821fea9c47b5f5"},{"type":"FIX","url":"https://github.com/phpmyadmin/phpmyadmin/commit/792cd1262f012b9b13639519d414f2acaeb5e972"},{"type":"FIX","url":"https://www.phpmyadmin.net/security/PMASA-2016-25/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/phpmyadmin/phpmyadmin","events":[{"introduced":"37b38431d167915675fc8ab512470528147e72de"},{"last_affected":"35e191d74b50c8f5a7b87fa9889869cc3a88255d"},{"fixed":"0815af37f483f329f0c0565d68821fea9c47b5f5"},{"fixed":"792cd1262f012b9b13639519d414f2acaeb5e972"}],"database_specific":{"cpe":["cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*","cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*","cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*","cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*","cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*","cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.6.0"},{"last_affected":"4.6.0"},{"introduced":"4.6.0-alpha1"},{"last_affected":"4.6.0-alpha1"},{"introduced":"4.6.0-rc1"},{"last_affected":"4.6.0-rc1"},{"introduced":"4.6.0-rc2"},{"last_affected":"4.6.0-rc2"},{"introduced":"4.6.1"},{"last_affected":"4.6.1"},{"introduced":"4.6.2"},{"last_affected":"4.6.2"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["4.6.0","4.6.0-alpha1","4.6.0-rc1","4.6.0-rc2","4.6.1","4.6.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5732.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}