PHPMyAdmin Multiple Cross-Site Scripting Vulnerabilities
BID:7962
Info
PHPMyAdmin Multiple Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 7962 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 18 2003 12:00AM |
| Updated: | Jun 18 2003 12:00AM |
| Credit: | Discovery of these vulnerabilities credited to Lorenzo Manuel Hernandez Garcia-Hierro <[email protected]>. |
| Vulnerable: |
phpMyAdmin phpMyAdmin 2.5.1 phpMyAdmin phpMyAdmin 2.5 .0 phpMyAdmin phpMyAdmin 2.4 .0 phpMyAdmin phpMyAdmin 2.3.2 phpMyAdmin phpMyAdmin 2.3.1 phpMyAdmin phpMyAdmin 2.2.6 phpMyAdmin phpMyAdmin 2.2.5 phpMyAdmin phpMyAdmin 2.2.4 phpMyAdmin phpMyAdmin 2.2.3 phpMyAdmin phpMyAdmin 2.2.2 phpMyAdmin phpMyAdmin 2.1 .2 phpMyAdmin phpMyAdmin 2.1 .1 phpMyAdmin phpMyAdmin 2.1 phpMyAdmin phpMyAdmin 2.0.5 phpMyAdmin phpMyAdmin 2.0.4 phpMyAdmin phpMyAdmin 2.0.3 phpMyAdmin phpMyAdmin 2.0.2 phpMyAdmin phpMyAdmin 2.0.1 phpMyAdmin phpMyAdmin 2.0 |
| Not Vulnerable: | |
Discussion
PHPMyAdmin Multiple Cross-Site Scripting Vulnerabilities
Several cross-site scripting vulnerabilities have been reported for phpMyAdmin. The vulnerabilities exist due to insufficient sanitization of user-supplied input.
This may allow for theft of cookie-based authentication credentials and other attacks.
Several cross-site scripting vulnerabilities have been reported for phpMyAdmin. The vulnerabilities exist due to insufficient sanitization of user-supplied input.
This may allow for theft of cookie-based authentication credentials and other attacks.
Exploit / POC
PHPMyAdmin Multiple Cross-Site Scripting Vulnerabilities
There is no exploit code required.
There is no exploit code required.
Solution / Fix
PHPMyAdmin Multiple Cross-Site Scripting Vulnerabilities
Solution:
These issues have been addressed in version 2.5.2 of phpMyAdmin, available from the following location.
phpMyAdmin phpMyAdmin 2.5.1
Solution:
These issues have been addressed in version 2.5.2 of phpMyAdmin, available from the following location.
phpMyAdmin phpMyAdmin 2.5.1
-
phpMyAdmin phpMyAdmin 2.5.2
http://www.phpmyadmin.net/index.php?dl=2