exploits , vulnerabilities , articles , phpMyAdmin Unspecified SQL Injection and Cross Site Scripting Vulnerabilities

Title	phpMyAdmin Unspecified SQL Injection and Cross Site Scripting Vulnerabilities
Published	2009-10-12-12:00AM
Updated	2009-10-16-07:58AM
Class	Input Validation Error
CVE
Remote	Yes
Local	No
Credit	The vendor.
Vulnerable	RedHat Fedora 11 RedHat Fedora 10 phpMyAdmin phpMyAdmin 3.2.2 phpMyAdmin phpMyAdmin 3.2.1 phpMyAdmin phpMyAdmin 3.1.1 1 phpMyAdmin phpMyAdmin 3.1.1 0 phpMyAdmin phpMyAdmin 3.1 0 phpMyAdmin phpMyAdmin 3.0.1 phpMyAdmin phpMyAdmin 3.0 phpMyAdmin phpMyAdmin 2.11.9 5 phpMyAdmin phpMyAdmin 2.11.9 4 phpMyAdmin phpMyAdmin 2.11.9 .2 phpMyAdmin phpMyAdmin 2.11.9 .1 phpMyAdmin phpMyAdmin 2.11.9 phpMyAdmin phpMyAdmin 3.2.1dev phpMyAdmin phpMyAdmin 3.2.0.1 phpMyAdmin phpMyAdmin 3.2.0rc1 phpMyAdmin phpMyAdmin 3.1.3.2 phpMyAdmin phpMyAdmin 3.1.3.1 phpMyAdmin phpMyAdmin 3.0.1.1 phpMyAdmin phpMyAdmin 2.11.9.3 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0
Not Vulnerable	phpMyAdmin phpMyAdmin 3.2.2 1 phpMyAdmin phpMyAdmin 2.11.9 6
Code	An attacker can exploit these issues via a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.
TXT