Novell Home

CVE-2009-1150

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

CVE-2009-1150 at MITRE

Details

Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allow remote attackers to inject arbitrary web script or HTML via the pma_db_filename_template cookie.
Novell Bugzilla entry: 490596

SUSE Security Advisories:

Product(s) Fixed package version(s) References
openSUSE 10.3
openSUSE 11.0
  • phpMyAdmin >= 2.11.9.5-0.1
ZYPP Patch Nr: 6133
SAT Patch Nr: 711

Novell® Making IT Work As One

© 2009 Novell, Inc. All Rights Reserved.