Novell Home

CVE-2008-2960

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

CVE-2008-2960 at MITRE

Details

Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.11.7, when register_globals is enabled and .htaccess support is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving scripts in libraries/.
Novell Bugzilla entry: 403093

SUSE Security Advisories:

Product(s) Fixed package version(s) References
openSUSE 10.3
openSUSE 11.0
  • phpMyAdmin >= 2.11.9.4-0.1
ZYPP Patch Nr: 5935
SAT Patch Nr: 442

Novell® Making IT Work As One

© 2009 Novell, Inc. All Rights Reserved.