BID:35543

phpMyAdmin SQL bookmark HTML Injection Vulnerability

Info

phpMyAdmin SQL bookmark HTML Injection Vulnerability

Bugtraq ID:	35543
Class:	Input Validation Error
CVE:	CVE-2009-2284
Remote:	Yes
Local:	No
Published:	Jun 30 2009 12:00AM
Updated:	Apr 13 2015 09:26PM
Credit:	Sven Vetsch
Vulnerable:	phpMyAdmin phpMyAdmin 3.1.1 0 phpMyAdmin phpMyAdmin 3.1.1 .1 phpMyAdmin phpMyAdmin 3.1 .0 phpMyAdmin phpMyAdmin 3.0.1 phpMyAdmin phpMyAdmin 3.0 phpMyAdmin phpMyAdmin 3.2.0-rc1 phpMyAdmin phpMyAdmin 3.1.3.2 phpMyAdmin phpMyAdmin 3.1.3.1 phpMyAdmin phpMyAdmin 3.0.1.1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5

Not Vulnerable:	phpMyAdmin phpMyAdmin 3.2.0.1

Discussion

phpMyAdmin SQL bookmark HTML Injection Vulnerability

phpMyAdmin is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

This issue affects versions prior to phpMyAdmin 3.2.0.1.

Exploit / POC

phpMyAdmin SQL bookmark HTML Injection Vulnerability

Attackers can use a browser to exploit this issue.

Solution / Fix

phpMyAdmin SQL bookmark HTML Injection Vulnerability

Solution:
Vendor updates are available. Please see the references for details.

MandrakeSoft Enterprise Server 5