phpmyadmin
Page content
- Vulnerable: 2.11.7.1-1kalgan1
- Unaffected: 2.11.8.1-1kalgan1
Aung Khant has reported two vulnerabilities in phpMyAdmin, which can be exploited by malicious local users to conduct cross-site scripting attacks, and by malicious people to conduct spoofing attacks.
-
Many scripts except for index.php do not check if they are linked into another site’s frames. This can potentially be used for spoofing and phishing attacks.
-
Input from the config/config.inc.php configuration file to scripts/setup.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user’s browser session in context of an affected site.
- Bug Tracker URL: http://bugs.frugalware.org/task/3271