|
|
| |
|
| |
phpmyadmin: cross-site scripting
| Package(s): | phpMyAdmin |
CVE #(s): | CVE-2011-4780
CVE-2011-4782
|
| Created: | January 2, 2012 |
Updated: | January 4, 2012 |
| Description: |
From the Red Hat bugzilla:
Multiple cross-site scripting (XSS) vulnerabilities in
libraries/display_export.lib.php in phpMyAdmin 3.4.x before 3.4.9
allow remote attackers to inject arbitrary web script or HTML via
crafted URL parameters, related to the export panels in the (1) server, (2) database, and (3) table sections. (CVE-2011-4780)
From the Red Hat bugzilla:
Cross-site scripting (XSS) vulnerability in
libraries/config/ConfigFile.class.php in the setup interface in
phpMyAdmin 3.4.x before 3.4.9 allows remote attackers to inject
arbitrary web script or HTML via the host parameter. (CVE-2011-4782) |
| Alerts: |
|
( Log in to post comments)
|
|
|