Info

Disclosure

Aug 20, 2010

Discovery

Aug 09, 2010

Dates

Exploit

Aug 20, 2010

Solution

Aug 20, 2010

Description

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Public
Disclosure: Vendor Verified, Coordinated Disclosure
OSVDB: Web Related

Solution

Upgrade to version 3.3.5.1 or 2.11.10.1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

Related OSVDB ID: 1121038 1121407 67316 67317 67318 67319 67320 67321 67322 67323 67324 67485 67486 67487 67488 67489 67491
CVE ID: 2010-3056 (see also: NVD)
Secunia Advisory ID: 41000 41075 41185 41954 47385
Bugtraq ID: 42584
Vendor Specific News/Changelog Entry: http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045991.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045997.html
http://www.gentoo.org/security/en/glsa/glsa-201201-01.xml
https://bugzilla.redhat.com/show_bug.cgi?id=625877
Mail List Post: http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045991.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045997.html
Vendor Specific Advisory URL: http://moodle.org/mod/forum/discuss.php?d=160811
http://www.phpmyadmin.net/home_page/security/PMASA-2010-5.php
http://www.us.debian.org/security/2010/dsa-2097
Other Advisory URL: http://yehg.net/lab/pr0js/advisories/phpmyadmin/%5Bphpmyadmin-3.3.5%5D_cross_site_scripting%28XSS%29

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/67490