exploits , vulnerabilities , articles , phpMyAdmin Multiple Cross-Site Scripting Vulnerabilities

Title	phpMyAdmin Multiple Cross-Site Scripting Vulnerabilities
Published	2008-07-29-12:00AM
Updated	2008-07-29-08:37PM
Class	Input Validation Error
CVE
Remote	Yes
Local	No
Credit	Aung Khant
Vulnerable	phpMyAdmin phpMyAdmin 2.11.7 phpMyAdmin phpMyAdmin 2.11.5 1 phpMyAdmin phpMyAdmin 2.11.4 phpMyAdmin phpMyAdmin 2.11.1 phpMyAdmin phpMyAdmin 2.9.1 phpMyAdmin phpMyAdmin 2.9 rc1 phpMyAdmin phpMyAdmin 2.9 .2 phpMyAdmin phpMyAdmin 2.9 .1 phpMyAdmin phpMyAdmin 2.9 phpMyAdmin phpMyAdmin 2.8.2 phpMyAdmin phpMyAdmin 2.8.1 phpMyAdmin phpMyAdmin 2.8 .4 phpMyAdmin phpMyAdmin 2.8 .3 phpMyAdmin phpMyAdmin 2.8 .1 phpMyAdmin phpMyAdmin 2.7 .0beta1 phpMyAdmin phpMyAdmin 2.7 pl1 phpMyAdmin phpMyAdmin 2.7 phpMyAdmin phpMyAdmin 2.6.4 rc1 phpMyAdmin phpMyAdmin 2.6.4 pl4 phpMyAdmin phpMyAdmin 2.6.4 pl3 phpMyAdmin phpMyAdmin 2.6.4 pl1 phpMyAdmin phpMyAdmin 2.6.3 pl1 phpMyAdmin phpMyAdmin 2.6.2 rc1 phpMyAdmin phpMyAdmin 2.6.2 Gentoo Linux phpMyAdmin phpMyAdmin 2.6.1 pl3 phpMyAdmin phpMyAdmin 2.6.1 pl1 phpMyAdmin phpMyAdmin 2.6.1 rc1 phpMyAdmin phpMyAdmin 2.6.1 phpMyAdmin phpMyAdmin 2.6 .0pl3 phpMyAdmin phpMyAdmin 2.6 .0pl2 Gentoo Linux 1.4 Gentoo Linux Gentoo Linux Gentoo Linux phpMyAdmin phpMyAdmin 2.6 .0pl1 phpMyAdmin phpMyAdmin 2.6 phpMyAdmin phpMyAdmin 2.5.7 pl1 phpMyAdmin phpMyAdmin 2.5.7 phpMyAdmin phpMyAdmin 2.5.6 rc1 phpMyAdmin phpMyAdmin 2.5.5 pl1 phpMyAdmin phpMyAdmin 2.5.5 rc2 phpMyAdmin phpMyAdmin 2.5.5 rc1 phpMyAdmin phpMyAdmin 2.5.5 phpMyAdmin phpMyAdmin 2.5.4 phpMyAdmin phpMyAdmin 2.5.3 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 9.0 phpMyAdmin phpMyAdmin 2.5.2 phpMyAdmin phpMyAdmin 2.5.1 phpMyAdmin phpMyAdmin 2.5 .0 phpMyAdmin phpMyAdmin 2.4 .0 phpMyAdmin phpMyAdmin 2.3.2 phpMyAdmin phpMyAdmin 2.3.1 phpMyAdmin phpMyAdmin 2.2.6 phpMyAdmin phpMyAdmin 2.2.5 phpMyAdmin phpMyAdmin 2.2.4 phpMyAdmin phpMyAdmin 2.2.3 phpMyAdmin phpMyAdmin 2.2.2 phpMyAdmin phpMyAdmin 2.2 rc3 phpMyAdmin phpMyAdmin 2.2 rc2 phpMyAdmin phpMyAdmin 2.2 rc1 phpMyAdmin phpMyAdmin 2.2 pre2 phpMyAdmin phpMyAdmin 2.2 pre1 phpMyAdmin phpMyAdmin 2.2 phpMyAdmin phpMyAdmin 2.1 .2 phpMyAdmin phpMyAdmin 2.1 .1 phpMyAdmin phpMyAdmin 2.1 Debian Linux 2.2 sparc Debian Linux 2.2 sparc Debian Linux 2.2 sparc Debian Linux 2.2 powerpc Debian Linux 2.2 powerpc Debian Linux 2.2 powerpc Debian Linux 2.2 arm Debian Linux 2.2 arm Debian Linux 2.2 arm Debian Linux 2.2 alpha Debian Linux 2.2 alpha Debian Linux 2.2 alpha Debian Linux 2.2 68k Debian Linux 2.2 68k Debian Linux 2.2 68k Debian Linux 2.2 Debian Linux 2.2 Debian Linux 2.2 FreeBSD FreeBSD 4.2 FreeBSD FreeBSD 4.2 FreeBSD FreeBSD 4.2 FreeBSD FreeBSD 3.5.1 FreeBSD FreeBSD 3.5.1 FreeBSD FreeBSD 3.5.1 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.0 MandrakeSoft Linux Mandrake 7.0 MandrakeSoft Linux Mandrake 7.0 OpenBSD OpenBSD 2.8 OpenBSD OpenBSD 2.8 OpenBSD OpenBSD 2.8 OpenBSD OpenBSD 2.7 OpenBSD OpenBSD 2.7 OpenBSD OpenBSD 2.7 OpenBSD OpenBSD 2.6 OpenBSD OpenBSD 2.6 OpenBSD OpenBSD 2.6 RedHat Linux 7.0 RedHat Linux 7.0 RedHat Linux 7.0 RedHat Linux 6.2 RedHat Linux 6.2 RedHat Linux 6.2 S.u.S.E. Linux 7.1 S.u.S.E. Linux 7.0 S.u.S.E. Linux 7.0 S.u.S.E. Linux 7.0 S.u.S.E. Linux 6.4 S.u.S.E. Linux 6.4 S.u.S.E. Linux 6.4 Sun Solaris 8_x86 Sun Solaris 8_x86 Sun Solaris 8_x86 Sun Solaris 8 Sun Solaris 8 Sun Solaris 8 Sun Solaris 7.0_x86 Sun Solaris 7.0_x86 Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 7.0 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6_x86 Sun Solaris 2.6_x86 Sun Solaris 2.6 Sun Solaris 2.6 Sun Solaris 2.6 phpMyAdmin phpMyAdmin 2.0.5 phpMyAdmin phpMyAdmin 2.0.4 phpMyAdmin phpMyAdmin 2.0.3 phpMyAdmin phpMyAdmin 2.0.2 phpMyAdmin phpMyAdmin 2.0.1 phpMyAdmin phpMyAdmin 2.0 phpMyAdmin phpMyAdmin 2.9.2rc1 phpMyAdmin phpMyAdmin 2.9.1.1 phpMyAdmin phpMyAdmin 2.9.0.3 phpMyAdmin phpMyAdmin 2.7.0pl2 phpMyAdmin phpMyAdmin 2.5.11.2 phpMyAdmin phpMyAdmin 2.11.5.2 phpMyAdmin phpMyAdmin 2.11.2.2 phpMyAdmin phpMyAdmin 2.11.2.1 phpMyAdmin phpMyAdmin 2.11.1.2 phpMyAdmin phpMyAdmin 2.11.1.1 phpMyAdmin phpMyAdmin 2.10.0.2 phpMyAdmin phpMyAdmin 2.10.0.1 phpMyAdmin phpMyAdmin 2.10.0.1
Not Vulnerable	phpMyAdmin phpMyAdmin 2.11.8 phpMyAdmin phpMyAdmin 2.11.8.1
Code	To exploit these issues, an attacker must entice an unsuspecting victim to follow a malicious URI.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-09 Adobe Flash Player and AIR Data Injection Remote Code Execution Vulnerability
2009-12-09 Adobe Flash Player ActiveX Control Information Disclosure Vulnerability
2009-12-09 Adobe Flash Player and AIR Multiple Unspecified Remote Code Execution Vulnerabilities
2009-12-09 HP OpenView Network Node Manager Multiple Remote Code Execution Vulnerabilities
2009-12-09 Shibboleth Redirection URL HTML Injection Vulnerability
2009-12-09 VLC Media Player RTSP Remote Buffer Overflow Vulnerability
2009-12-09 Polipo Malformed HTTP GET Request Memory Corruption Vulnerability
2009-12-09 PhpShop Cross-Site Scripting and SQL Injection Vulnerabilities
2009-12-09 GNU GRUB Local Authentication Bypass Vulnerability
2009-12-09 NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability