>> Debian Security Update Fixes phpMyAdmin Cross Site Scripting Issues
Title : Debian Security Update Fixes phpMyAdmin Cross Site Scripting Issues VUPEN ID : VUPEN/ADV-2007-3810 CVE ID : CVE-2007-5386 - CVE-2007-5589
Rated as : Low Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2007-11-09
Technical Description
Multiple vulnerabilities have been identified in Debian, which could be exploited by attackers to execute arbitrary scripting code. These issues are caused by errors in phpMyAdmin. For additional information, see : VUPEN/ADV-2007-3535 - VUPEN/ADV-2007-3469
Debian GNU/Linux sarge - Upgrade to phpmyadmin version 4:2.6.2-3sarge6
Debian GNU/Linux etch - Upgrade to phpmyadmin version 4:2.9.1.1-6
Debian GNU/Linux sid - Upgrade to phpmyadmin version 4:2.11.1.2-1 References