DEBIAN-CVE-2011-1940

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1 allow remote attackers to inject arbitrary web script or HTML via a crafted table name that triggers improper HTML rendering on a Tracking page, related to 1 libraries/tbllinks.inc.php and...

CVE-2011-1940

CVE-2011-1940 affects phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1. The vulnerability is a cross-site scripting (XSS) flaw triggered by supplying a crafted table name on the Tracking page, which causes improper HTML rendering. The root causes are located in two components: libraries/tb...

XSS vulnerability on Tracking page.

PMASA-2011-3 Announcement-ID: PMASA-2011-3 Date: 2011-05-22 Summary XSS vulnerability on Tracking page. Description It was possible to create a crafted table name that leads to XSS. Severity We consider this vulnerability to be serious. Mitigation factor This vulnerability works in the context of...