phpMyAdmin version 4.8.1 remote code execution exploit.
c7fd500b6b33a3e044159ceaba0504a93de489c811db969c2903f7741e995f09Mandriva Linux Security Advisory 2012-136 - Multiple cross-site scripting vulnerabilities was discovered by using the Database structure page with a crafted table name. This upgrade provides the latest phpmyadmin version to address this vulnerability.
4f113b7473341f4b5b1404d9fbf72c22dd8466370f6b383c45f0eb638cb6c89eMandriva Linux Security Advisory 2012-050 - Multiple vulnerabilities have been found and corrected in phpmyadmin. It was possible to conduct XSS using a crafted database name. The show_config_errors.php scripts did not validate the presence of the configuration file, so an error message shows the full path of this file, leading to possible further attacks. This upgrade provides the latest phpmyadmin version to address these vulnerabilities.
93d942bfdbef2f771612c750a8616e56326709a757aee4d07b4eec4152b0e354Secunia Security Advisory - Debian has issued an update for phpmyadmin. This fixes multiple vulnerabilities, which can be exploited by malicious users to disclose potentially sensitive information and conduct script insertion attacks.
42a9cb9ded3074df83f9cc6ce4685fc96d6e6615cbacc62428df4ff6f5797d73Debian Linux Security Advisory 2391-1 - Several vulnerabilities have been discovered in phpMyAdmin, a tool to administer MySQL over the web.
6b9978773cc9b5ff74c87471f4d39830b867da4e8a3cd93f6b20507e4c14391bphpMyAdmin versions 3.3.x and 3.4.x suffer from a local file inclusion vulnerability via XXE injection. The attacker must be logged in to MySQL via phpMyAdmin.
3198e8d89bc1a8cc793e92a6136c7fe6f956875742096c8de8840899af48ddb4Secunia Security Advisory - Gentoo has issued an update for phpMyAdmin. This fixes multiple security issues and vulnerabilities, which can be exploited by malicious users to disclose sensitive information, bypass certain security restrictions, conduct cross-site scripting attacks, manipulate certain data, potentially perform certain actions with escalated privileges, and compromise a vulnerable system and by malicious people to disclose potentially sensitive information, bypass certain security restrictions, conduct cross-site scripting and script insertion attacks, and compromise a vulnerable system.
231127dd7c2038aa139f43b0054e3018f84f106d8ec8fb289f0bb902260a9eb8Gentoo Linux Security Advisory 201201-1 - Multiple vulnerabilities were found in phpMyAdmin, the most severe of which allows the execution of arbitrary PHP code. Versions less than 3.4.9 are affected.
a9a0414a3c076b4e97dee46444baeb67c679e1b447f44f4f421858257e7dff0cMandriva Linux Security Advisory 2011-198 - Multiple vulnerabilities has been found and corrected in phpmyadmin. Importing a specially-crafted XML file which contains an XML entity injection permits to retrieve a local file (limited by the privileges of the user running the web server). Using crafted database names, it was possible to produce XSS in the Database Synchronize and Database rename panels. Using an invalid and crafted SQL query, it was possible to produce XSS when editing a query on a table overview panel or when using the view creation dialog. Using a crafted column type, it was possible to produce XSS in the table search and create index dialogs. Crafted values entered in the setup interface can produce XSS; also, if the config directory exists and is writeable, the XSS payload can be saved to this directory. Using crafted url parameters, it was possible to produce XSS on the export panels in the server, database and table sections. This upgrade provides the latest phpmyadmin version to address these vulnerabilities.
849717620dc582e004cf04bfa3adddb6224bed65bd3093ac4c8205f2f134c230phpMyAdmin version 3.4.8 suffers from a cross site scripting vulnerability.
a8c40f3aee84c74d540c2097d20b0799688cc7300895c4ba59bc51a7b094009fSecunia Security Advisory - A vulnerability has been reported in phpMyAdmin, which can be exploited by malicious people to conduct script insertion attacks.
d10f9a2348cc53f33afdaaba4e4ba2497f0312ad17311078840093fbf29e159bSecunia Security Advisory - Fedora has issued an update for phpMyAdmin. This fixes a vulnerability, which can be exploited by malicious users to disclose potentially sensitive information.
674d50b46e23b056f74cb59b5b124d2870874d7943804717a1ade390dee4f32dSecunia Security Advisory - A vulnerability has been reported in the phpMyAdmin extension for TYPO3, which can be exploited by malicious users to disclose potentially sensitive information.
8adc727d9e825ae43b9d8d1eef2df5ed22c7a5f7c8512fd7348a7c56f2aeedd4Secunia Security Advisory - Fedora has issued an update for phpMyAdmin. This fixes a vulnerability, which can be exploited by malicious people to conduct cross-site scripting attacks.
f09f86e689e9ad24e70177b05885368d897c1880d31fb597fa5b5dd9c84e4cbeSecunia Security Advisory - 80sec has discovered a vulnerability in phpMyAdmin, which can be exploited by malicious users to disclose potentially sensitive information.
5ba8070b5a78633e69ea1e4fd61914b8c9bef91d17729471d71c0f7efe00f639phpMyAdmin suffers from a remote arbitrary file reading vulnerability when using a simplexml_load_string function meant to read xml from user input.
e9107c1ea9ecd076a0b594c54978d18ecaa5e210966639afd6ab79b6715853a9Mandriva Linux Security Advisory 2011-158 - Multiple vulnerabilities have been found and corrected in phpmyadmin. Missing sanitization on the table, column and index names leads to XSS vulnerabilities. When the js_frame parameter of phpmyadmin.css.php is defined as an array, an error message shows the full path of this file, leading to possible further attacks. Other issues were also addressed.
513a6634ec239490a9a92a87936f7267be3961a1e77857529e832da2c9b6ba9eSecunia Security Advisory - A vulnerability has been reported in the phpMyAdmin extension for TYPO3, which can be exploited malicious people to conduct cross-site scripting attacks.
6ecce104a578fb17f8fb5af6793e1338a984159b1b6c78064479ecd6bdfcb578Secunia Security Advisory - A vulnerability has been reported in phpMyAdmin, which can be exploited by malicious people to conduct cross-site scripting attacks.
7ee1f54b7c57ad9ce0402f5e7020946f9701dbf044d22e636692e2b3fd5c985fThis PHP script scans a given webserver for various phpMyAdmin administrative pages / directories.
43b359163a0d78664ab5ee845e18e82ef711188e22723956ec574d7fa9b891a4Secunia Security Advisory - Fedora has issued an update for phpMyAdmin. This fixes multiple vulnerabilities, which can be exploited by malicious users to conduct script insertion attacks.
2352f48a4878dd1c0b271e05d6a79fa616c4754cdffadda254f8e09e3e2fdeeaSecunia Security Advisory - Multiple vulnerabilities have been reported in phpMyAdmin, which can be exploited by malicious users to conduct script insertion attacks.
0c30e9ab4c53a5d27df0d94d60ef1bd082bccfdca53f1f203adf1ef2cb6ba50dSecunia Security Advisory - Multiple vulnerabilities have been reported in the phpMyAdmin extension for TYPO3, which can be exploited by malicious users to conduct script insertion attacks.
177bfb716bb5ca0f3de4e4caf18bdfff46d6c015df2d47b44b164fc66386dfbcSecunia Security Advisory - Fedora has issued an update for phpMyAdmin. This fixes some vulnerabilities, which can be exploited by malicious users to conduct script insertion attacks.
46707b5938ec0679b08a2bd1c673b174d1229022bea7258b4f749bd4db4f1ef9Secunia Security Advisory - Multiple vulnerabilities have been reported in the phpMyAdmin extension for TYPO3, which can be exploited by malicious users to conduct script insertion attacks.
e4e3f0be1094c1585cdca905fcfada379d25eb80bdd205711be35498e4c18c4dSecunia Security Advisory - Some vulnerabilities have been reported in phpMyAdmin, which can be exploited by malicious users to conduct script insertion attacks.
e5831bebcdf082f00dedc9ba520c8f929549d114d9ce8d2d2a79c2c801a39122
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed