Cross-site scripting (XSS) vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that does not URL-encode requests, allows remote attackers to inject arbitrary web script or HTML via the query string.

The login page (auth_type cookie) was vulnerable to XSS via the convcharset parameter (PMASA-2007-8).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Omer Singer of the DigiTrust Group discovered several vulnerabilities in phpMyAdmin, an application to administrate MySQL over the WWW. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-5589     phpMyAdmin allows a remote attacker to inject arbitrary     web script or HTML in the context of a logged in user's     session (cross site scripting).

  - CVE-2007-5386     phpMyAdmin, when accessed by a browser that does not     URL-encode requests, allows remote attackers to inject     arbitrary web script or HTML via the query string.

- Mon Oct 29 2007 Mike McGrath <mmcgrath at redhat.com>     2.11.2-1

    - upstream released new version

    - Mon Oct 22 2007 Mike McGrath <mmcgrath at redhat.com>       2.11.1.2-1

    - upstream released new version

    - Thu Sep 6 2007 Mike McGrath <mmcgrath at redhat.com>       2.11.0-1

    - Upstream released new version

    - Altered sources file as required

    - Added proper license

    - Mon Jul 23 2007 Mike McGrath <mmcgrath at redhat.com>       2.10.3-1

    - Upstream released new version

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

SecurityFocus reports :

phpMyAdmin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal potentially sensitive information and launch other attacks.

ID	Name	Product	Family	Severity
28311	Fedora 7 : phpMyAdmin-2.11.2.2-1.fc7 (2007-3666)	Nessus	Fedora Local Security Checks	medium
28310	Fedora 8 : phpMyAdmin-2.11.2.2-1.fc8 (2007-3639)	Nessus	Fedora Local Security Checks	medium
27842	Debian DSA-1403-1 : phpmyadmin - missing input sanitising	Nessus	Debian Local Security Checks	medium
27800	Fedora 7 : phpMyAdmin-2.11.2-1.fc7 (2007-2738)	Nessus	Fedora Local Security Checks	medium
27067	FreeBSD : phpmyadmin -- XSS vulnerability (51b51d4a-7c0f-11dc-9e47-0011d861d5e2)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2007-5386

medium

Tenable Plugins

medium

medium

medium

medium

medium