Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Gentoo: GLSA-200504-08 Moderate: Cross-Site Scripting in phpMyAdmin

gentoo
Calendar Grey April 11, 2005
Scroller Gentoo
The Gentoo Linux security advisory GLSA 202301-02 outlines a critical vulnerability in phpMyAdmin, specifically a cross-site scripting issue. It is advised to perform an upgrade without delay.
phpMyAdmin is vulnerable to a cross-site scripting attack.

Summary

Gentoo Linux Security Advisory GLSA 200504-08 https://security.gentoo.org/ Severity: Low Title: phpMyAdmin: Cross-site scripting vulnerability Date: April 11, 2005 Bugs: #87952 ID: 200504-08

Synopsis ======= phpMyAdmin is vulnerable to a cross-site scripting attack.
Background ========= phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL databases from a web-browser.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-db/phpmyadmin < 2.6.2_rc1 >= 2.6.2_rc1
========== Oriol Torrent Santiago has discovered that phpMyAdmin fails to validate input to the "convcharset" variable, rendering it vulnerable to cross-site scripting atta...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory moderate gentoo cross-site scripting vulnerability phpMyAdmin

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
low
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory moderate gentoo cross-site scripting vulnerability phpMyAdmin

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround