|
|
| |
|
| |
phpmyadmin: multiple vulnerabilities
| Package(s): | phpmyadmin |
CVE #(s): | CVE-2008-3197
CVE-2008-3456
CVE-2008-3457
CVE-2008-4096
|
| Created: | September 22, 2008 |
Updated: | March 19, 2009 |
| Description: |
From the Debian advisory:
CVE-2008-4096:
Remote authenticated users could execute arbitrary code on the
host running phpMyAdmin through manipulation of a script parameter.
CVE-2008-3457:
Cross site scripting through the setup script was possible in
rare circumstances.
CVE-2008-3456:
Protection has been added against remote websites loading phpMyAdmin
into a frameset.
CVE-2008-3197:
Cross site request forgery allowed remote attackers to create a new
database, but not perform any other action on it.
|
| Alerts: |
|
( Log in to post comments)
|
|
|