|
|
| |
|
| |
phpMyAdmin: multiple vulnerabilities
| Package(s): | phpmyadmin |
CVE #(s): | CVE-2011-3646
CVE-2011-4064
|
| Created: | October 21, 2011 |
Updated: | November 14, 2011 |
| Description: |
From the Mandriva advisory:
When the js_frame parameter of phpmyadmin.css.php is defined as an
array, an error message shows the full path of this file, leading to
possible further attacks (CVE-2011-3646).
Crafted values entered in the setup interface can produce XSS; also,
if the config directory exists and is writeable, the XSS payload can
be saved to this directory (CVE-2011-4064).
|
| Alerts: |
|
( Log in to post comments)
|
|
|