Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1 allow remote attackers to inject arbitrary web script or HTML via a crafted table name that triggers improper HTML rendering on a Tracking page, related to (1) libraries/tbl_links.inc.php and (2) tbl_tracking.php.

Several vulnerabilities have been discovered in phpMyAdmin, a tool to administer MySQL over the web. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2011-4107     The XML import plugin allowed a remote attacker to read     arbitrary files via XML data containing external entity     references.

  - CVE-2011-1940, CVE-2011-3181     Cross site scripting was possible in the table tracking     feature, allowing a remote attacker to inject arbitrary     web script or HTML.

The oldstable distribution (lenny) is not affected by these problems.

The remote host contains a version of phpMyAdmin - 3.3.x less than 3.3.10.1 or 3.4.x less than 3.4.1 - that is affected by multiple vulnerabilities:

  - The scripts 'tbl_links.php' and 'tbl-tracking' fail to     filter input to the 'table' and 'db' parameters.  An     attacker may be able to exploit this issue to inject     arbitrary HTML and script code into a user's browser,     to be executed within the security context of the     affected application, resulting in the theft of session     cookies and a compromise of a user's account.
    (Issue #2011-03)

  - For versions 3.4.x < 3.4.1, the script 'url.php' fails     to validate input to the 'url' parameter before     redirecting to a specified location. (Issue #2011-04)

Versions of phpMyAdmin 3.3.x earlier than 3.3.10.1 and 3.4.x earlier than 3.4.1 are potentially affected by multiple vulnerabilities : 

  - It is possible to create a crafted table name that could lead to a cross-site scripting attack. (PMASA-2011-3)

  - It is possible to redirect to an arbitrary, untrusted site, leading to a possible phishing site. (PMASA-2011-4)

ID	Name	Product	Family	Severity
57621	Debian DSA-2391-1 : phpmyadmin - several vulnerabilities	Nessus	Debian Local Security Checks	medium
55023	phpMyAdmin < 3.3.10.1 / 3.4.1 Multiple Vulnerabilities (PMASA-2011-03 - PMASA-2011-04	Nessus	CGI abuses	medium
5930	phpMyAdmin 3.3.x < 3.3.10.1 / 3.4.x < 3.4.1 Multiple Vulnerabilities	Nessus Network Monitor	CGI	low

Detections

Analytics

CVE-2011-1940

medium

Tenable Plugins

medium

medium

low