Freely subscribe to our NEWSLETTER

Vigil@nce: phpMyAdmin, Cross Site Scripting via backtrace

September 2010 by Vigil@nce

This bulletin was written by Vigil@nce : http://vigilance.fr/

SYNTHESIS OF THE VULNERABILITY

An attacker can use backtrace features to generate a Cross Site
Scripting in phpMyAdmin.

– Severity: 2/4
– Creation date: 02/09/2010

DESCRIPTION OF THE VULNERABILITY

The phpMyAdmin server is used to administer a MySQL database via a
web browser.

The page Error.class.php do not correctly checks data passed via
URL.

An attacker can therefore use backtrace feature to generate a
Cross Site Scripting in phpMyAdmin.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

See previous articles

New, you can have your Podcast here. Contact us for more information ask:
Marc Brami
Phone: +33 1 40 92 05 55
Mail: ipsimp@free.fr