Test ID:	1.3.6.1.4.1.25623.1.0.831299
Category:	Mandrake Local Security Checks
Title:	Mandriva Update for phpmyadmin MDVSA-2011:000 (phpmyadmin)
Summary:	The remote host is missing an update for the 'phpmyadmin'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'phpmyadmin' package(s) announced via the referenced advisory. Vulnerability Insight: Multiple vulnerabilities has been found and corrected in phpmyadmin: error.php in PhpMyAdmin 3.3.8.1 and earlier allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted BBcode tag containing @ characters, as demonstrated using [a@url@page] (CVE-2010-4480). phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function (CVE-2010-4481). This upgrade provides the latest phpmyadmin version for MES5 (3.3.9) and patches the version for CS4 to address these vulnerabilities. Affected Software/OS: phpmyadmin on Mandriva Enterprise Server 5, Mandriva Enterprise Server 5/X86_64 Solution: Please Install the Updated Packages. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4480 BugTraq ID: 45633 http://www.securityfocus.com/bid/45633 Debian Security Information: DSA-2139 (Google Search) http://www.debian.org/security/2010/dsa-2139 http://www.exploit-db.com/exploits/15699 http://www.mandriva.com/security/advisories?name=MDVSA-2011:000 http://secunia.com/advisories/42485 http://secunia.com/advisories/42725 http://www.vupen.com/english/advisories/2010/3133 http://www.vupen.com/english/advisories/2011/0001 http://www.vupen.com/english/advisories/2011/0027 Common Vulnerability Exposure (CVE) ID: CVE-2010-4481 http://www.vupen.com/english/advisories/2010/3238
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.