English | Deutsch | Español | Português
 UserID:
 Passwd:
new user
 About:   Dedicated  | Advanced  | Standard  | Recurring  | No Risk  | Desktop  | Basic  | Single  | Security Seal  | FAQ
  Price/Feature Summary  | Order  | New Vulnerabilities  | Confidentiality  | Vulnerability Search
 Vulnerability   
Search   
    Search 143769 CVE descriptions
and 71225 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 --------------------------------------------------------------------------
   Turbolinux Security Advisory TLSA-2008-29
   http://www.turbolinux.co.jp/security/
                                             security-team@turbolinux.co.jp
 --------------------------------------------------------------------------

 Original released date: 18 Jul 2008
 Last revised: 18 Jul 2008

 Package: phpmyadmin

 Summary: Cross-site scripting (XSS) vulnerability

 More information:
    phpMyAdmin is a tool written in PHP intended to handle the
    administration of MySQL over the Web.

    Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.11.7,
    when register_globals is enabled and .htaccess support is disabled,
    allows remote attackers to inject arbitrary web script or HTML via
    unspecified vectors involving scripts in libraries/. (CVE-2008-2960)

 Affected Products:
    - Turbolinux Appliance Server 3.0 x64 Edition
    - Turbolinux Appliance Server 3.0


 <Turbolinux Appliance Server 3.0 x64 Edition>

   Source Packages
   Size: MD5

   phpmyadmin-2.11.7-1.src.rpm
      3106306 67eb1e8ba275e08ad62d1ac6ff15401c

   Binary Packages
   Size: MD5

   phpmyadmin-2.11.7-1.noarch.rpm
      4439307 65d2e8b1159f610b75281efad67ead19

 <Turbolinux Appliance Server 3.0>

   Source Packages
   Size: MD5

   phpmyadmin-2.11.7-1.src.rpm
      3106306 67eb1e8ba275e08ad62d1ac6ff15401c

   Binary Packages
   Size: MD5

   phpmyadmin-2.11.7-1.noarch.rpm
      4440156 3d75beb7b61062e851e718ee85c1f2e9


 References:

 CVE
   [CVE-2008-2960]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2960

 --------------------------------------------------------------------------
 Revision History
    18 Jul 2008 Initial release
 --------------------------------------------------------------------------

 Copyright(C) 2008 Turbolinux, Inc. All rights reserved. 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkiAaegACgkQK0LzjOqIJMz73gCfapF8XVcPRvNjaBolRgo8GPjF
rqsAn1ab8NAVkJCTXNpnXZ2GioES6Re6
=WvsK
-----END PGP SIGNATURE-----

New User Registration
Email:
UserID:
Passwd:
Please email me your monthly newsletters, informing the latest services, improvements & surveys.
Please email me a vulnerability test announcement whenever a new test is added.
   Privacy
Registered User Login
 
UserID:   
Passwd:  

 Forgot userid or passwd?
Email/Userid:




Home | About Us | Contact Us | Partner Programs | Developer APIs | Privacy | Mailing Lists | Abuse
Security Audits | Managed DNS | Network Monitoring | Site Analyzer | Internet Research Reports
Web Probe

© 1998-2019 E-Soft Inc. All rights reserved.