CVE-2010-3056

Related Files

Gentoo Linux Security Advisory 201201-01

Posted Jan 5, 2012

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201201-1 - Multiple vulnerabilities were found in phpMyAdmin, the most severe of which allows the execution of arbitrary PHP code. Versions less than 3.4.9 are affected.

tags | advisory, arbitrary, php, vulnerability

systems | linux, gentoo

advisories | CVE-2008-7251, CVE-2008-7252, CVE-2010-2958, CVE-2010-3055, CVE-2010-3056, CVE-2010-3263, CVE-2011-0986, CVE-2011-0987, CVE-2011-2505, CVE-2011-2506, CVE-2011-2507, CVE-2011-2508, CVE-2011-2642, CVE-2011-2643, CVE-2011-2718, CVE-2011-2719, CVE-2011-3646, CVE-2011-4064, CVE-2011-4107, CVE-2011-4634, CVE-2011-4780, CVE-2011-4782

SHA-256 | a9a0414a3c076b4e97dee46444baeb67c679e1b447f44f4f421858257e7dff0c

Download | Favorite | View

Debian Linux Security Advisory 2097-2

Posted Sep 14, 2010

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2097-2 - The update in DSA 2097 for phpMyAdmin did not correctly apply the intended changes, thereby not completely addressing the vulnerabilities. The configuration setup script does not properly sanitize its output file, which allows remote attackers to execute arbitrary PHP code via a crafted POST request. In Debian, the setup tool is protected through Apache HTTP basic authentication by default. Various cross site scripting issues have been discovered that allow a remote attacker to inject arbitrary web script or HTML.

tags | advisory, remote, web, arbitrary, php, vulnerability, xss

systems | linux, debian

advisories | CVE-2010-3055, CVE-2010-3056

SHA-256 | c21f472813e5c7c0a304c173d6cf63b3c3701881ecb40c9dd4192c61fc607c73

Download | Favorite | View

Mandriva Linux Security Advisory 2010-164

Posted Aug 30, 2010

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2010-164 - It was possible to conduct a XSS attack using crafted URLs or POST parameters on several pages. This upgrade provides phpmyadmin 3.3.5.1 which is not vulnerable for this security issue.

tags | advisory

systems | linux, mandriva

advisories | CVE-2010-3056

SHA-256 | 60db42d3354d6ff1f1c80b63abae9bea06cc95f164fa11a0f38df7f544c7f2f4

Download | Favorite | View

Mandriva Linux Security Advisory 2010-163

Posted Aug 30, 2010

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2010-163 - The setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file. Combined with the ability to save files on the server, this can allow unauthenticated users to execute arbitrary PHP code. It was possible to conduct a XSS attack using crafted URLs or POST parameters on several pages. This upgrade provides phpmyadmin 2.11.10.1 which is not vulnerable for these security issues.

tags | advisory, arbitrary, php

systems | linux, mandriva

advisories | CVE-2010-3055, CVE-2010-3056

SHA-256 | 9986c79908b9ee4d1ba1f58ab5437dfb3312b87f607400d0eb139d1ac17b4e10

Download | Favorite | View

Debian Linux Security Advisory 2097-1

Posted Aug 30, 2010

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2097-1 - Several remote vulnerabilities have been discovered in phpMyAdmin, a tool to administer MySQL over the web.

tags | advisory, remote, web, vulnerability

systems | linux, debian

advisories | CVE-2010-3055, CVE-2010-3056

SHA-256 | 95a8d46ad69848cca0eb3506aef5c1ec2226aff5c00cd60ce4735cec56aca9b5

Download | Favorite | View