#20647 – CVE-2009-2284 XSS attack via a crafted SQL bookmark

Bug 20647 - CVE-2009-2284 XSS attack via a crafted SQL bookmark

Summary: CVE-2009-2284 XSS attack via a crafted SQL bookmark

Status:	CLOSED FIXED

Alias:	None

Product:	Sisyphus
Classification:	Development
Component:	phpMyAdmin (show other bugs)
Version:	unstable
Hardware:	all Linux

Importance:	P3 blocker
Assignee:	drool
QA Contact:	qa-sisyphus

URL:	http://www.phpmyadmin.net/home_page/s...
Keywords:	security

Depends on:	22408
Blocks:
	Show dependency tree

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Vladimir Lettiev 2009-07-01 13:20:44 MSD

Обнаружена уязвимость в phpMyAdmin, позволяющая провести XSS-атаку через SQL-закладки.

Исправление доступно в версии 3.2.0.1

Dmitriy Kulik 2009-12-25 11:17:28 MSK

Сделано...