https://bugzilla.novell.com/show_bug.cgi?id=236619#c8
Ludwig Nussel changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEEDINFO |ASSIGNED
Info Provider|meissner@novell.com |
--- Comment #8 from Ludwig Nussel 2007-07-30 08:47:18 MST ---
MaintenanceTracker-11763
There's also PMASA-2007-4, do we need fixes for that as well? What about 10.0,
10.1?
Announcement-ID: PMASA-2007-4
Date: 2007-04-24
Updated: 2007-05-17 (real name of reporter)
Summary:
XSS vulnerabilities
Description:
We received an advisory from Lukasz Plonka "sp3x" (SecurityReason) and we wish
to thank him for his work.
It was possible to trigger these attacks on various scripts due to
shortcomings in the JavaScript code detection.
Severity:
We consider these vulnerabilities to be serious.
Affected versions:
Probably all versions to 2.10.0.2.
Solution:
Upgrade to phpMyAdmin 2.10.1 or newer.
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.