CVE-2012-1190

Cross-site scripting XSS vulnerability in the replication-setup functionality in js/replication.js in phpMyAdmin 3.4.x before 3.4.10.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted database name...

CVE-2012-1190

CVE-2012-1190 is an XSS vulnerability in the replication-setup feature (js/replication.js) of phpMyAdmin 3.4.x prior to 3.4.10.1. The flaw allows user-assisted remote attackers to inject arbitrary script/HTML via a crafted database name. Public references in the connected documents confirm the af...

CVE-2012-1190

Cross-site scripting XSS vulnerability in the replication-setup functionality in js/replication.js in phpMyAdmin 3.4.x before 3.4.10.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted database name...

phpMyAdmin 3.x 数据库名称跨站脚本执行漏洞

BUGTRAQ ID: 52857 CVE ID: CVE-2012-1190 phpMyAdmin是一个用PHP编写的，可以通过web方式控制和操作MySQL数据库。 phpMyAdmin在处理特制的数据库名称时存在跨站脚本执行漏洞，攻击者可利用此漏洞在受影响站点的用户浏览器中执行任意脚本代码，窃取Cookie验证凭证。 0 phpMyAdmin 3.x 厂商补丁： phpMyAdmin ---------- phpMyAdmin已经为此发布了一个安全公告（PMASA-2012-1）以及相应补丁: PMASA-2012-1：PMASA-2012-1...

CVE-2012-1190: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the replication-setup functionality in js/replication.js in phpMyAdmin 3.4.x before 3.4.10.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted database name...

phpMyAdmin 3.x 'show_config_errors.php'完整路径信息泄露漏洞

BUGTRAQ ID: 52858 CVE ID: CVE-2012-1902 phpMyAdmin是一个用PHP编写的，可以通过web方式控制和操作MySQL数据库。 phpMyAdmin在实现上存在安全漏洞，showconfigerrors.php没有验证配置文件的存在，因此错误信息中显示该文件的完整路径，导致信息泄露。 0 phpMyAdmin 3.x 厂商补丁： phpMyAdmin ---------- phpMyAdmin已经为此发布了一个安全公告（PMASA-2012-2）以及相应补丁: PMASA-2012-2：PMASA-2012-2...

[SECURITY] Fedora 17 Update: phpMyAdmin-3.5.0-1.fc17

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

Fedora 17 : phpMyAdmin-3.5.0-1.fc17 (2012-5599)

Changes for 3.5.0.0 2012-04-07 : - interface Add support for mass prefix change. - display 'up to date' message on main page when current version is up to date - feature Update to jQuery 1.6.2 - search Show/hide db search results - patch Add gettext wrappers around a message - cleanup Remove...

[SECURITY] Fedora 16 Update: phpMyAdmin-3.5.0-1.fc16

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

[SECURITY] Fedora 15 Update: phpMyAdmin-3.5.0-1.fc15

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

Fedora 15 : phpMyAdmin-3.5.0-1.fc15 (2012-5631)

Changes for 3.5.0.0 2012-04-07 : - interface Add support for mass prefix change. - display 'up to date' message on main page when current version is up to date - feature Update to jQuery 1.6.2 - search Show/hide db search results - patch Add gettext wrappers around a message - cleanup Remove...

FreeBSD Ports: phpMyAdmin

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: phpMyAdmin

The remote host is missing an update to the system as announced in the referenced advisory. VID a81161d2-790f-11e1-ac16-e0cb4e266481 OpenVAS Vulnerability Test $ Description: Auto generated from VID a81161d2-790f-11e1-ac16-e0cb4e266481 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

WebSploit Toolkit 1.6 Released

WebSploit Is An Open Source Project For Scan And Analysis Remote System From Vulnerability Description : +Autopwn - Used From Metasploit For Scan and Exploit Target Service +wmap - Scan,Crawler Target Used From Metasploit wmap plugin +format infector - inject reverse & bind payload into file form...

phpMyAdmin Information Disclosure Vulnerability (PMASA-2012-2) - Active Check

phpMyAdmin is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Phpmyadmin File Upload

Phpmyadmin config file code injection setup.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

PHPmyadmin 2.11. 3 and 2. 1 1. 4 universal password vulnerability-vulnerability warning-the black bar safety net

Affected versions: PHPmyadmin 2.11.3 PHPmyadmin 2.11.4 Both versions have this vulnerability Only need to enter the account password does not need to input Use the code as follows:‘localhost’@'@” !...

[ MDVSA-2012:050 ] phpmyadmin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:050 http://www.mandriva.com/security/ Package : phpmyadmin Date : April 3, 2012 Affected: Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been found and corrected in phpmyadmin: It wa...

CVE-2012-1902

showconfigerrors.php in phpMyAdmin 3.4.x before 3.4.10.2, when a configuration file does not exist, allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message about this missing file...

DEBIAN-CVE-2012-1902

showconfigerrors.php in phpMyAdmin 3.4.x before 3.4.10.2, when a configuration file does not exist, allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message about this missing file...