{"id":"CVE-2013-5002","aliases":["GHSA-p632-5w74-x8xx"],"url":"https://o3.security/vulnerability/CVE-2013-5002","summary":"phpMyAdmin Cross-site scripting (XSS) vulnerability via pageNumber value ","details":"Cross-site scripting (XSS) vulnerability in libraries/schema/Export_Relation_Schema.class.php in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted pageNumber value to schema_export.php.","published":"2013-07-31T13:20:08Z","modified":"2026-04-16T06:21:02.427739939Z","cvss":null,"epss":{"score":0.00967,"percentile":0.60082,"asOf":"2026-09-16"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"phpmyadmin/phpmyadmin","fixedVersion":"3.5.8.2"},{"ecosystem":"Packagist","name":"phpmyadmin/phpmyadmin","fixedVersion":"4.0.4.2"}],"fix":null,"references":[{"type":"ADVISORY","url":"http://secunia.com/advisories/59832"},{"type":"ADVISORY","url":"http://www.phpmyadmin.net/home_page/security/PMASA-2013-14.php"},{"type":"WEB","url":"http://www.securityfocus.com/bid/61516"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5002"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-04-16T06:21:02.427739939Z"}}