Technical Description

Two vulnerabilities were identified in phpMyAdmin, which may be exploited by remote attackers to conduct directory traversal or cross site scripting attacks.

The first issue is due to input validation errors in the "left.php", "queryframe.php", and "server_databases.php" scripts when processing specially crafted parameters, which may be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser.

The second flaw is due to input validation errors in various scripts that do not properly filter specially crafted parameters, which may be exploited by remote attackers to disclose the contents of arbitrary files.

Affected Products

phpMyAdmin version 2.6.4-pl2 and prior

Solution

Upgrade to phpMyAdmin version 2.6.4-pl3 :
http://www.phpmyadmin.net/home_page/downloads.php

References

http://www.vupen.com/english/advisories/2005/2179
http://www.hardened-php.net/advisory_162005.73.html
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5

Credits

Vulnerabilities reported by Stefan Esser and Tobias Klein

ChangeLog

2005-10-24 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.