73 matches found
Fedora Update for phpMyAdmin FEDORA-2007-3666
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for phpMyAdmin FEDORA-2007-3639
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2008-5589
CVE-2008-5589 describes an SQL injection in processlogin.asp of Katy Whitton RankEm, exploitable via the txtusername or txtpassword fields to execute arbitrary SQL remotely. The root cause is improper input handling allowing concatenation into SQL queries, leading to potential data disclosure or ...
openSUSE 10 Security Update : phpMyAdmin (phpMyAdmin-5083)
This update of phpMyAdmin fixes a cross-site-scripting vulnerability. CVE-2007-6100,CVE-2007-5589 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update phpMyAdmin-5083. The text description of this...
openSUSE 10 Security Update : phpMyAdmin (phpMyAdmin-5084)
This update of phpMyAdmin fixes a cross-site-scripting vulnerability. CVE-2007-6100,CVE-2007-5589 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update phpMyAdmin-5084. The text description of this...
Debian: Security Advisory (DSA-1403-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 1403-1] New phpmyadmin packages fix cross-site scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1403-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 8th, 2007 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1403-1] New phpmyadmin packages fix cross-site scripting
-------------------------------------------------------------------------- Debian Security Advisory DSA 1403-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 8th, 2007 http://www.debian.org/security/faq -...
DSA-1403-1 phpmyadmin - cross-site scripting
Bulletin has no description...
CVE-2007-5589
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbitrary web script or HTML via certain input available in 1 PHPSELF in a serverstatus.php, and b grabglobals.lib.php, c displaychangepassword.lib.php, and d common.lib.php in...
CVE-2007-5589
CVE-2007-5589 is a cross-site scripting vulnerability in phpMyAdmin affecting versions prior to a patched release (noted in multiple advisories). The vulnerability arises from input echoed via PHP_SELF and PATH_INFO in several files inside libraries/ and common.inc.php (and possibly via REQUEST_U...
CVE-2007-5589
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbitrary web script or HTML via certain input available in 1 PHPSELF in a serverstatus.php, and b grabglobals.lib.php, c displaychangepassword.lib.php, and d common.lib.php in...
CVE-2006-5589
Summary: CVE-2006-5589 affects LedgerSMB (LSMB) up to 1.1.0 and earlier with SQL injection vulnerabilities in the modules OE.pm, AM.pm, and Form.pm that allow remote execution of arbitrary SQL commands. The risk is described as high (CVSS v2 base score 7.5). Connected documents confirm that Ledge...