Bug 105598

Summary:	dev-db/phpmyadmin: new XSS vulnerabilities fixed in 2.6.4
Product:	Gentoo Security	Reporter:	Renat Lumpau (RETIRED) <rl03>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	minor
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0
Whiteboard:	B4 [noglsa]
Package list:		Runtime testing required:	---

Description Renat Lumpau (RETIRED) gentoo-dev

2005-09-11 06:31:23 UTC

XSS on the cookie-based login panel
XSS on table creation page
XSS on username (cookie-based login)

Fixed in 2.6.4

Comment 1 Renat Lumpau (RETIRED) gentoo-dev

2005-09-11 06:32:48 UTC

2.6.4 in CVS

Comment 2 Thierry Carrez (RETIRED) gentoo-dev

2005-09-11 08:43:49 UTC

Looks like an officialisation of the RC1 security fixes (bug 104124).
Committed directly stable by maintainer, ready for GLSA vote.

I vote NO.

Comment 3 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2005-09-11 13:17:22 UTC

Voting NO and closing.  
 
Thx for the report Renat.