Debian Security Advisory DSA 1557-1 (phpmyadmin)

The remote host is missing an update to phpmyadmin announced via advisory DSA 1557-1. OpenVAS Vulnerability Test $Id: deb15571.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1557-1 phpmyadmin Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1557-1 : phpmyadmin - insufficient input sanitising

Several remote vulnerabilities have been discovered in phpMyAdmin, an application to administrate MySQL over the WWW. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1924 Attackers with CREATE table permissions were allowed to read arbitrary files...

[SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1557-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 24, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1557-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 24, 2008 http://www.debian.org/security/faq -...

DSA-1557-1 phpmyadmin - several vulnerabilities

Bulletin has no description...

[ GLSA 200803-15 ] phpMyAdmin: SQL injection vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200803-15 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

Fedora 8 : phpMyAdmin-2.11.5-1.fc8 (2008-2189)

This is a bugfix-only version containing a security fix: Remove cookies from $REQUEST for better coexistence with other applications, thanks to Richard Cunningham. See PMASA-2008-1. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora 7 : phpMyAdmin-2.11.5-1.fc7 (2008-2229)

This is a bugfix-only version containing a security fix: Remove cookies from $REQUEST for better coexistence with other applications, thanks to Richard Cunningham. See PMASA-2008-1. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

CVE-2008-1149

phpMyAdmin before 2.11.5 accesses $REQUEST to obtain some parameters instead of $GET and $POST, which allows attackers in the same domain to override certain variables and conduct SQL injection and Cross-Site Request Forgery CSRF attacks by using crafted cookies...

CVE-2008-1149

CVE-2008-1149 affects phpMyAdmin prior to 2.11.5, where code reads parameters from $_REQUEST (instead of $_GET/$_POST), enabling attackers in the same domain to override variables and perform SQL injection and CSRF via crafted cookies. The connected documents indicate this was addressed in later ...

CVE-2007-4667

Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149...

Code injection

Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149...

CVE-2007-4667

CVE-2007-4667 affects Firebird before 2.0.2, describing an unspecified vulnerability in the Services API that allows remote attackers to cause a denial of service (CORE-1149). The record does not specify the exact root cause, exploit technique, or affected subcomponents beyond the Services API an...

CVE-2007-4667

Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149...

CVE-2007-1149

CVE-2007-1149 affects LoveCMS 1.4 and is a directory traversal vulnerability. The issue allows remote attackers to read arbitrary files by supplying a .. (dot dot) traversal sequence in either (1) the step parameter to install/index.php or (2) the load parameter of the top-level URI. The connecte...

CVE-2006-1149

The CVE-2006-1149 entry applies to Owl Intranet Engine 0.82. PHP remote file inclusion arises when register_globals is on and xrms_file_root is used unsafely in lib/OWL_API.php. An unauthenticated attacker can cause arbitrary file inclusion (and potentially PHP code execution) by supplying a URL ...

CVE-2003-1149

The vulnerability CVE-2003-1149 affects Symantec Norton Internet Security 2003, specifically version 6.0.4.34. It is a cross-site scripting (XSS) flaw where a remote attacker can inject arbitrary script or HTML by supplying a crafted URL to a blocked-site page, which is then displayed on the bloc...

CVE-2005-1149

CVE-2005-1149 is a SQL injection flaw in aspclick.it ACNews 1.0, affecting admin/login.asp where the (1) username and (2) password parameters are unsafely handled. The Red Hat advisory echoes the same description, indicating remote attackers could execute arbitrary SQL commands. The available doc...

CVE-2004-1149

Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions ACLs, which allows local users to gain privileges by replacing critical programs with malicious ones, as demonstrated using VetMsg.exe...

CVE-2004-1149

The CVE-2004-1149 issue concerns Computer Associates eTrust EZ Antivirus versions 7.0.0–7.0.4 (including 7.0.1.4). The root cause is insecure default file permissions (ACLs) applied during installation, allowing a local user to modify installed files and replace a program (notably VetMsg.exe) to ...