phpmyadmin: cross-site scripting
| Package(s): | phpMyAdmin | CVE #(s): | CVE-2011-4780 CVE-2011-4782 | ||||||||||||||||
| Created: | January 2, 2012 | Updated: | January 4, 2012 | ||||||||||||||||
| Description: | From the Red Hat bugzilla:
Multiple cross-site scripting (XSS) vulnerabilities in libraries/display_export.lib.php in phpMyAdmin 3.4.x before 3.4.9 allow remote attackers to inject arbitrary web script or HTML via crafted URL parameters, related to the export panels in the (1) server, (2) database, and (3) table sections. (CVE-2011-4780) From the Red Hat bugzilla: Cross-site scripting (XSS) vulnerability in libraries/config/ConfigFile.class.php in the setup interface in phpMyAdmin 3.4.x before 3.4.9 allows remote attackers to inject arbitrary web script or HTML via the host parameter. (CVE-2011-4782) | ||||||||||||||||||
| Alerts: |
| ||||||||||||||||||