CVE-2012-1902

Related Files

Mandriva Linux Security Advisory 2012-050

Posted Apr 4, 2012

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2012-050 - Multiple vulnerabilities have been found and corrected in phpmyadmin. It was possible to conduct XSS using a crafted database name. The show_config_errors.php scripts did not validate the presence of the configuration file, so an error message shows the full path of this file, leading to possible further attacks. This upgrade provides the latest phpmyadmin version to address these vulnerabilities.

tags | advisory, php, vulnerability

systems | linux, mandriva

advisories | CVE-2012-1190, CVE-2012-1902

SHA-256 | 93d942bfdbef2f771612c750a8616e56326709a757aee4d07b4eec4152b0e354

Download | Favorite | View