BID:16389

PHPMyAdmin Multiple Cross-Site Scripting Vulnerabilities

Info

PHPMyAdmin Multiple Cross-Site Scripting Vulnerabilities

Bugtraq ID:	16389
Class:	Input Validation Error
CVE:	CVE-2005-3787
Remote:	Yes
Local:	No
Published:	Nov 23 2005 12:00AM
Updated:	Aug 15 2006 08:10PM
Credit:	These issues were disclosed by the vendor.
Vulnerable:	S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 9.1 x86_64 S.u.S.E. Linux Professional 9.1 S.u.S.E. Linux Professional 9.0 x86_64 S.u.S.E. Linux Professional 9.0 S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 phpMyAdmin phpMyAdmin 2.7 .0-beta1 phpMyAdmin phpMyAdmin 2.6.4 -rc1 phpMyAdmin phpMyAdmin 2.6.4 -pl3 phpMyAdmin phpMyAdmin 2.6.4 -pl1 phpMyAdmin phpMyAdmin 2.6.3 -pl1 phpMyAdmin phpMyAdmin 2.6.2 -rc1 phpMyAdmin phpMyAdmin 2.6.2 + Gentoo Linux phpMyAdmin phpMyAdmin 2.6.1 pl3 phpMyAdmin phpMyAdmin 2.6.1 pl1 phpMyAdmin phpMyAdmin 2.6.1 -rc1 phpMyAdmin phpMyAdmin 2.6.1 phpMyAdmin phpMyAdmin 2.6 .0pl3 phpMyAdmin phpMyAdmin 2.6 .0pl2 + Gentoo Linux 1.4 + Gentoo Linux + Gentoo Linux + Gentoo Linux phpMyAdmin phpMyAdmin 2.6 .0pl1 phpMyAdmin phpMyAdmin 2.5.7 pl1 phpMyAdmin phpMyAdmin 2.5.7 phpMyAdmin phpMyAdmin 2.5.6 -rc1 phpMyAdmin phpMyAdmin 2.5.5 pl1 phpMyAdmin phpMyAdmin 2.5.5 -rc2 phpMyAdmin phpMyAdmin 2.5.5 -rc1 phpMyAdmin phpMyAdmin 2.5.5 phpMyAdmin phpMyAdmin 2.5.4 phpMyAdmin phpMyAdmin 2.5.3 + S.u.S.E. Linux Personal 9.3 + S.u.S.E. Linux Personal 9.2 x86_64 + S.u.S.E. Linux Personal 9.2 x86_64 + S.u.S.E. Linux Personal 9.2 x86_64 + S.u.S.E. Linux Personal 9.2 + S.u.S.E. Linux Personal 9.2 + S.u.S.E. Linux Personal 9.2 + S.u.S.E. Linux Personal 9.1 x86_64 + S.u.S.E. Linux Personal 9.1 x86_64 + S.u.S.E. Linux Personal 9.1 x86_64 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 + S.u.S.E. Linux Personal 9.0 + S.u.S.E. Linux Personal 9.0 phpMyAdmin phpMyAdmin 2.5.2 phpMyAdmin phpMyAdmin 2.5.1 phpMyAdmin phpMyAdmin 2.5 .0 phpMyAdmin phpMyAdmin 2.4 .0 phpMyAdmin phpMyAdmin 2.3.2 phpMyAdmin phpMyAdmin 2.3.1 phpMyAdmin phpMyAdmin 2.2.6 phpMyAdmin phpMyAdmin 2.2.5 phpMyAdmin phpMyAdmin 2.2.4 phpMyAdmin phpMyAdmin 2.2.3 phpMyAdmin phpMyAdmin 2.2.2 phpMyAdmin phpMyAdmin 2.2 rc3 phpMyAdmin phpMyAdmin 2.2 rc2 phpMyAdmin phpMyAdmin 2.2 rc1 phpMyAdmin phpMyAdmin 2.2 pre2 phpMyAdmin phpMyAdmin 2.2 pre1 phpMyAdmin phpMyAdmin 2.2 phpMyAdmin phpMyAdmin 2.1 .2 phpMyAdmin phpMyAdmin 2.1 .1 phpMyAdmin phpMyAdmin 2.1 - Debian Linux 2.2 sparc - Debian Linux 2.2 sparc - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 powerpc - Debian Linux 2.2 powerpc - Debian Linux 2.2 arm - Debian Linux 2.2 arm - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 alpha - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - Debian Linux 2.2 68k - Debian Linux 2.2 68k - Debian Linux 2.2 - Debian Linux 2.2 - Debian Linux 2.2 - FreeBSD FreeBSD 4.2 - FreeBSD FreeBSD 4.2 - FreeBSD FreeBSD 4.2 - FreeBSD FreeBSD 3.5.1 - FreeBSD FreeBSD 3.5.1 - FreeBSD FreeBSD 3.5.1 - Mandriva Linux Mandrake 7.2 - Mandriva Linux Mandrake 7.2 - Mandriva Linux Mandrake 7.2 - Mandriva Linux Mandrake 7.1 - Mandriva Linux Mandrake 7.1 - Mandriva Linux Mandrake 7.1 - Mandriva Linux Mandrake 7.0 - Mandriva Linux Mandrake 7.0 - Mandriva Linux Mandrake 7.0 - OpenBSD OpenBSD 2.8 - OpenBSD OpenBSD 2.8 - OpenBSD OpenBSD 2.8 - OpenBSD OpenBSD 2.7 - OpenBSD OpenBSD 2.7 - OpenBSD OpenBSD 2.7 - OpenBSD OpenBSD 2.6 - OpenBSD OpenBSD 2.6 - OpenBSD OpenBSD 2.6 - Redhat Linux 7.0 - Redhat Linux 7.0 - Redhat Linux 7.0 - Redhat Linux 6.2 - Redhat Linux 6.2 - Redhat Linux 6.2 - Sun Solaris 8_x86 - Sun Solaris 8_x86 - Sun Solaris 8_x86 - Sun Solaris 8_sparc - Sun Solaris 8_sparc - Sun Solaris 8_sparc - Sun Solaris 7.0_x86 - Sun Solaris 7.0_x86 - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 7.0 - Sun Solaris 7.0 - Sun Solaris 2.6_x86 - Sun Solaris 2.6_x86 - Sun Solaris 2.6_x86 - Sun Solaris 2.6 - Sun Solaris 2.6 - Sun Solaris 2.6 - SuSE Linux 7.1 - SuSE Linux 7.0 - SuSE Linux 7.0 - SuSE Linux 7.0 - SuSE Linux 6.4 - SuSE Linux 6.4 - SuSE Linux 6.4 phpMyAdmin phpMyAdmin 2.0.5 phpMyAdmin phpMyAdmin 2.0.4 phpMyAdmin phpMyAdmin 2.0.3 phpMyAdmin phpMyAdmin 2.0.2 phpMyAdmin phpMyAdmin 2.0.1 phpMyAdmin phpMyAdmin 2.0

Not Vulnerable:	phpMyAdmin phpMyAdmin 2.7 phpMyAdmin phpMyAdmin 2.6.4 -pl4

Discussion

PHPMyAdmin Multiple Cross-Site Scripting Vulnerabilities

phpMyAdmin is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Exploit / POC

PHPMyAdmin Multiple Cross-Site Scripting Vulnerabilities

No exploit is required.

Solution / Fix

PHPMyAdmin Multiple Cross-Site Scripting Vulnerabilities

Solution:
SUSE Linux has released security advisory SUSE-SA:2006:004 addressing this and other issues. Please see the referenced advisory for more information.

The vendor has addressed this issue in version 2.6.4-pl4 and later:

phpMyAdmin phpMyAdmin 2.0