Bug 20647 - CVE-2009-2284 XSS attack via a crafted SQL bookmark
Summary: CVE-2009-2284 XSS attack via a crafted SQL bookmark
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: phpMyAdmin (show other bugs)
Version: unstable
Hardware: all Linux
: P3 blocker
Assignee: drool
QA Contact: qa-sisyphus
URL: http://www.phpmyadmin.net/home_page/s...
Keywords: security
Depends on: 22408
Blocks:
  Show dependency tree
 
Reported: 2009-07-01 13:20 MSD by Vladimir Lettiev
Modified: 2009-12-31 17:00 MSK (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Vladimir Lettiev 2009-07-01 13:20:44 MSD 
Обнаружена уязвимость в phpMyAdmin, позволяющая провести XSS-атаку через SQL-закладки.

Исправление доступно в версии 3.2.0.1
Comment 1 Dmitriy Kulik 2009-12-25 11:17:28 MSK 
Сделано...