phpmyadmin: multiple vulnerabilities
| Package(s): | phpmyadmin | CVE #(s): | CVE-2012-1190 CVE-2012-1902 | ||||||||||||||||
| Created: | April 3, 2012 | Updated: | May 1, 2012 | ||||||||||||||||
| Description: | From the Mandriva advisory:
It was possible to conduct XSS using a crafted database name (CVE-2012-1190). The show_config_errors.php scripts did not validate the presence of the configuration file, so an error message shows the full path of this file, leading to possible further attacks (CVE-2012-1902). | ||||||||||||||||||
| Alerts: |
| ||||||||||||||||||