Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbitrary web script or HTML via certain input available in (1) PHP_SELF in (a) server_status.php, and (b) grab_globals.lib.php, (c) display_change_password.lib.php, and (d) common.lib.php in libraries/; and certain input available in PHP_SELF and (2) PATH_INFO in libraries/common.inc.php. NOTE: there might also be other vectors related to (3) REQUEST_URI.

This update of phpMyAdmin fixes a cross-site-scripting vulnerability.
(CVE-2007-6100,CVE-2007-5589)

The login page (auth_type cookie) was vulnerable to XSS via the convcharset parameter (PMASA-2007-8).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Omer Singer of the DigiTrust Group discovered several vulnerabilities in phpMyAdmin, an application to administrate MySQL over the WWW. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-5589     phpMyAdmin allows a remote attacker to inject arbitrary     web script or HTML in the context of a logged in user's     session (cross site scripting).

  - CVE-2007-5386     phpMyAdmin, when accessed by a browser that does not     URL-encode requests, allows remote attackers to inject     arbitrary web script or HTML via the query string.

- Mon Oct 29 2007 Mike McGrath <mmcgrath at redhat.com>     2.11.2-1

    - upstream released new version

    - Mon Oct 22 2007 Mike McGrath <mmcgrath at redhat.com>       2.11.1.2-1

    - upstream released new version

    - Thu Sep 6 2007 Mike McGrath <mmcgrath at redhat.com>       2.11.0-1

    - Upstream released new version

    - Altered sources file as required

    - Added proper license

    - Mon Jul 23 2007 Mike McGrath <mmcgrath at redhat.com>       2.10.3-1

    - Upstream released new version

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The DigiTrust Group discovered serious XSS vulnerability in the phpMyAdmin server_status.php script. According to their report

vulnerability can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

ID	Name	Product	Family	Severity
31456	openSUSE 10 Security Update : phpMyAdmin (phpMyAdmin-5084)	Nessus	SuSE Local Security Checks	medium
31455	openSUSE 10 Security Update : phpMyAdmin (phpMyAdmin-5083)	Nessus	SuSE Local Security Checks	medium
28311	Fedora 7 : phpMyAdmin-2.11.2.2-1.fc7 (2007-3666)	Nessus	Fedora Local Security Checks	medium
28310	Fedora 8 : phpMyAdmin-2.11.2.2-1.fc8 (2007-3639)	Nessus	Fedora Local Security Checks	medium
27842	Debian DSA-1403-1 : phpmyadmin - missing input sanitising	Nessus	Debian Local Security Checks	medium
27800	Fedora 7 : phpMyAdmin-2.11.2-1.fc7 (2007-2738)	Nessus	Fedora Local Security Checks	medium
27508	FreeBSD : phpmyadmin -- XSS vulnerability (498a8731-7cfc-11dc-96e6-0012f06707f0)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2007-5589

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium