CVE-2011-2642

Multiple cross-site scripting XSS vulnerabilities in the table Print view implementation in tblprintview.php in phpMyAdmin before 3.3.10.3 and 3.4.x before 3.4.3.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name...

CVE-2011-2719

CVE-2011-2719 affects phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2. The vulnerability arises from improper handling of sessions associated with Swekey authentication in libraries/auth/swekey/swekey.auth.lib.php, enabling remote attackers to modify the SESSION superglobal (and other rel...

CVE-2011-2642

phpMyAdmin is affected by CVE-2011-2642: several XSS vulnerabilities in tbl_printview.php (Print view) that allow remote authenticated users to inject arbitrary script/HTML via a crafted table name. Affected versions are phpMyAdmin before 3.3.10.3 and 3.4.x before 3.4.3.2. The underlying issue is...

CVE-2011-2642

Multiple cross-site scripting XSS vulnerabilities in the table Print view implementation in tblprintview.php in phpMyAdmin before 3.3.10.3 and 3.4.x before 3.4.3.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name...

CVE-2011-2719

libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attackers to modify the SESSION superglobal array, other superglobal arrays, and certain...

CVE-2011-2643

CVE-2011-2643 affects phpMyAdmin 3.4.x (before 3.4.3.2). The vulnerability is a directory traversal in sql.php when configuration storage is enabled, allowing a remote attacker to include and execute arbitrary local files through directory traversal sequences in a MIME-type transformation paramet...

CVE-2011-2643

Directory traversal vulnerability in sql.php in phpMyAdmin 3.4.x before 3.4.3.2, when configuration storage is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in a MIME-type transformation parameter...

CVE-2011-2718

CVE-2011-2718 concerns phpMyAdmin 3.4.x

CVE-2011-2643

Directory traversal vulnerability in sql.php in phpMyAdmin 3.4.x before 3.4.3.2, when configuration storage is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in a MIME-type transformation parameter...

PT-2011-4041 · Phpmyadmin · Phpmyadmin

Name of the Vulnerable Software and Affected Versions: phpMyAdmin versions 3.x prior to 3.3.10.3 phpMyAdmin versions 3.4.x prior to 3.4.3.2 Description: The issue is related to the management of sessions associated with Swekey authentication in the phpMyAdmin software. This allows remote attacker...

[SECURITY] [DSA 2286-1] phpmyadmin security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2286-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 26, 2011 http://www.debian.org/security/faq -...

CVE-2011-2719: Improper Input Validation

libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attackers to modify the SESSION superglobal array, other superglobal arrays, and certain...

CVE-2011-2642: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the table Print view implementation in tblprintview.php in phpMyAdmin before 3.3.10.3 and 3.4.x before 3.4.3.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name...

CVE-2011-2643: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in sql.php in phpMyAdmin 3.4.x before 3.4.3.2, when configuration storage is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in a MIME-type transformation parameter...

CVE-2011-2718: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to 1...

PT-2011-4040 · Phpmyadmin · Phpmyadmin

Name of the Vulnerable Software and Affected Versions: phpMyAdmin versions 3.4.x through 3.4.3.1 Description: The issue allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field. This is related to the files...

phpMyAdmin 3.3.x < 3.3.10.3 / 3.4.x < 3.4.3.2 Multiple Vulnerabilities

Binary data 5995.prm...

Debian DSA-2286-1 : phpmyadmin - several vulnerabilities

Several vulnerabilities were discovered in phpMyAdmin, a tool to administrate MySQL over the web. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-2505 Possible session manipulation in Swekey authentication. - CVE-2011-2506 Possible code injection in...

[SECURITY] [DSA 2286-1] phpmyadmin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2286-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 26, 2011 http://www.debian.org/security/faq -...

phpMyAdmin 3.x Conditional Session Manipulation

phpMyAdmin 3.x Conditional Session Manipulation Advisory from ???????????????????????????????????????????????.??? ??':????:'?????????????????????????????????????????::?????'??'.? ????'.??.'?????????????????????????????????????????????????????? ?????'..'???????..???..?????????:':??????????...