diff options
| author | simon <simon@FreeBSD.org> | 2005-07-31 21:50:20 +0800 |
|---|---|---|
| committer | simon <simon@FreeBSD.org> | 2005-07-31 21:50:20 +0800 |
| commit | b575134e8b74442d8ace5ab7e8583145ddc9268e (patch) | |
| tree | 501bb53a3f6dcb6c6d234f1404dc18d5e564dd78 | |
| parent | a959ee2cfe73f877cedb7709081984fbdd9ba337 (diff) | |
| download | freebsd-ports-gnome-b575134e8b74442d8ace5ab7e8583145ddc9268e.tar.gz freebsd-ports-gnome-b575134e8b74442d8ace5ab7e8583145ddc9268e.tar.zst freebsd-ports-gnome-b575134e8b74442d8ace5ab7e8583145ddc9268e.zip | |
Document phpmyadmin -- cross site scripting vulnerability.
| -rw-r--r-- | security/vuxml/vuln.xml | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index ab09eb2ba39e..0985e6816d90 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,36 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="58247a96-01c8-11da-bc08-0001020eed82"> + <topic>phpmyadmin -- cross site scripting vulnerability</topic> + <affects> + <package> + <name>phpmyadmin</name> + <name>phpMyAdmin</name> + <range><lt>2.6.2.r1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>A phpMyAdmin security announcement reports:</p> + <blockquote cite="http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-3"> + <p>The convcharset parameter was not correctly validated, + opening the door to a XSS attack. </p> + </blockquote> + </body> + </description> + <references> + <bid>12982</bid> + <cvename>CAN-2005-0992</cvename> + <mlist msgid="4f9e4516050404101223fbdeed@mail.gmail.com">http://marc.theaimsgroup.com/?l=bugtraq&m=111264361622660</mlist> + <url>http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-3</url> + </references> + <dates> + <discovery>2005-04-03</discovery> + <entry>2005-07-31</entry> + </dates> + </vuln> + <vuln vid="8375a73f-01bf-11da-bc08-0001020eed82"> <topic>gnupg -- OpenPGP symmetric encryption vulnerability</topic> <affects> |