CERTA-2006-AVI-142
Vulnerability from certfr_avis

Une vulnérabilité dans phpMyAdmin permet à un utilisateur distant mal intentionné de conduire une attaque de type Cross Site Scripting.

Description

Une vulnérabilité dans phpMyAdmin rend possible l'utilisation de scripts présents dans le répertoire de thèmes de phpMyAdmin afin de conduire une attaque de type Cross Site Scripting.

Solution

La version 2.8.0.3 de phpMyAdmin corrige le problème :

http://www.phpmyadmin.net/home_page/downloads.php

phpMyAdmin versions 2.8.0.2 et antérieures.

Impacted products
Vendor Product Description

Show details on source website


{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003ephpMyAdmin versions 2.8.0.2 et  ant\u00e9rieures.\u003c/p\u003e",
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 dans phpMyAdmin rend possible l\u0027utilisation de scripts\npr\u00e9sents dans le r\u00e9pertoire de th\u00e8mes de phpMyAdmin afin de conduire une\nattaque de type Cross Site Scripting.\n\n## Solution\n\nLa version 2.8.0.3 de phpMyAdmin corrige le probl\u00e8me :\n\n    http://www.phpmyadmin.net/home_page/downloads.php\n",
  "cves": [],
  "initial_release_date": "2006-04-07T00:00:00",
  "last_revision_date": "2006-04-11T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 FreeBSD :",
      "url": "http://www.vuxml.org/freebsd/pkg-php-MyAdmin.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2006-1 du 06 avril    2006",
      "url": "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-1"
    },
    {
      "title": "Site de phpMyAdmin :",
      "url": "http://www.phpmyadmin.net"
    }
  ],
  "reference": "CERTA-2006-AVI-142",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-04-07T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 FreeBSD.",
      "revision_date": "2006-04-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Attaque de type cross site scripting"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans phpMyAdmin permet \u00e0 un utilisateur distant mal\nintentionn\u00e9 de conduire une attaque de type Cross Site Scripting.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 PMASA-2006-1 de phpMyAdmin du 06 avril 2006",
      "url": null
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…