phpmyadmin: cross-site scripting
| Package(s): | phpmyadmin | CVE #(s): | CVE-2016-5099 | ||||||||||||||||||||||||||||
| Created: | May 31, 2016 | Updated: | June 2, 2016 | ||||||||||||||||||||||||||||
| Description: | From the Mageia advisory:
In phpMyAdmin before 4.4.15.6, a specially crafted attack could allow for special HTML characters to be passed as URL encoded values and displayed back as special characters in the page. | ||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||