phpPgAdmin SQLEDIT.PHP Cross Site Scripting Vulnerability

An attacker must entice an unsuspecting victim into following a malicious URI to exploit this issue.

The following proof-of-concept URI is available:

https://www.example.com/phpPgAdmin/sqledit.php?server=[xss]


 

Privacy Statement
Copyright 2010, SecurityFocus