• info
• discussion
• exploit
• solution
• references

phpMyAdmin SQL Injection and Cross Site Scripting Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 ia-64

• Debian phpmyadmin_2.11.8.1-5+lenny3_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .11.8.1-5+lenny3_all.deb

Debian Linux 5.0 alpha

• Debian phpmyadmin_2.11.8.1-5+lenny3_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .11.8.1-5+lenny3_all.deb

Debian Linux 5.0 mipsel

• Debian phpmyadmin_2.11.8.1-5+lenny3_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .11.8.1-5+lenny3_all.deb

Debian Linux 4.0 amd64

• Debian phpmyadmin_2.9.1.1-13_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .9.1.1-13_all.deb

Debian Linux 4.0 ia-32

• Debian phpmyadmin_2.9.1.1-13_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .9.1.1-13_all.deb

Debian Linux 4.0 hppa

• Debian phpmyadmin_2.9.1.1-13_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .9.1.1-13_all.deb

Debian Linux 4.0 armel

• Debian phpmyadmin_2.9.1.1-13_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .9.1.1-13_all.deb

Debian Linux 5.0 armel

• Debian phpmyadmin_2.11.8.1-5+lenny3_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .11.8.1-5+lenny3_all.deb

Debian Linux 5.0

• Debian phpmyadmin_2.11.8.1-5+lenny3_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .11.8.1-5+lenny3_all.deb

Debian Linux 4.0 mipsel

• Debian phpmyadmin_2.9.1.1-13_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .9.1.1-13_all.deb

Debian Linux 5.0 mips

• Debian phpmyadmin_2.11.8.1-5+lenny3_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .11.8.1-5+lenny3_all.deb

Debian Linux 4.0 ia-64

• Debian phpmyadmin_2.9.1.1-13_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .9.1.1-13_all.deb

Debian Linux 4.0 mips

• Debian phpmyadmin_2.9.1.1-13_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .9.1.1-13_all.deb

Debian Linux 5.0 sparc

• Debian phpmyadmin_2.11.8.1-5+lenny3_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .11.8.1-5+lenny3_all.deb

Debian Linux 4.0 arm

• Debian phpmyadmin_2.9.1.1-13_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .9.1.1-13_all.deb

Debian Linux 4.0 powerpc

• Debian phpmyadmin_2.9.1.1-13_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .9.1.1-13_all.deb

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva phpmyadmin-3.2.2.1-0.1mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 m68k

• Debian phpmyadmin_2.9.1.1-13_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .9.1.1-13_all.deb

Debian Linux 5.0 ia-32

• Debian phpmyadmin_2.11.8.1-5+lenny3_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .11.8.1-5+lenny3_all.deb

MandrakeSoft Enterprise Server 5

• Mandriva phpmyadmin-3.2.2.1-0.1mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

• Debian phpmyadmin_2.11.8.1-5+lenny3_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .11.8.1-5+lenny3_all.deb

Debian Linux 5.0 hppa

• Debian phpmyadmin_2.11.8.1-5+lenny3_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .11.8.1-5+lenny3_all.deb

Debian Linux 4.0 sparc

• Debian phpmyadmin_2.9.1.1-13_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .9.1.1-13_all.deb

Debian Linux 4.0 s/390

• Debian phpmyadmin_2.9.1.1-13_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .9.1.1-13_all.deb

Debian Linux 5.0 m68k

• Debian phpmyadmin_2.11.8.1-5+lenny3_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .11.8.1-5+lenny3_all.deb

Debian Linux 5.0 arm

• Debian phpmyadmin_2.11.8.1-5+lenny3_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .11.8.1-5+lenny3_all.deb

Debian Linux 4.0 alpha

• Debian phpmyadmin_2.9.1.1-13_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .9.1.1-13_all.deb

MandrakeSoft Corporate Server 4.0

• Mandriva phpMyAdmin-2.11.9.6-0.1.20060mlcs4.noarch.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0

• Debian phpmyadmin_2.9.1.1-13_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .9.1.1-13_all.deb

Debian Linux 5.0 amd64

• Debian phpmyadmin_2.11.8.1-5+lenny3_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .11.8.1-5+lenny3_all.deb

Debian Linux 5.0 powerpc

• Debian phpmyadmin_2.11.8.1-5+lenny3_all.deb
  http://security.debian.org/pool/updates/main/p/phpmyadmin/phpmyadmin_2 .11.8.1-5+lenny3_all.deb

Typo3 phpMyAdmin 0.2.2

• Typo3 phpmyadmin_4.5.0.t3x
  http://typo3.org/fileadmin/ter/p/h/phpmyadmin_4.5.0.t3x

Typo3 phpMyAdmin 3.0

• Typo3 phpmyadmin_4.5.0.t3x
  http://typo3.org/fileadmin/ter/p/h/phpmyadmin_4.5.0.t3x

Typo3 phpMyAdmin 3.0.1

• Typo3 phpmyadmin_4.5.0.t3x
  http://typo3.org/fileadmin/ter/p/h/phpmyadmin_4.5.0.t3x

Typo3 phpMyAdmin 3.2

• Typo3 phpmyadmin_4.5.0.t3x
  http://typo3.org/fileadmin/ter/p/h/phpmyadmin_4.5.0.t3x

Typo3 phpMyAdmin 3.3

• Typo3 phpmyadmin_4.5.0.t3x
  http://typo3.org/fileadmin/ter/p/h/phpmyadmin_4.5.0.t3x

Typo3 phpMyAdmin 3.4

• Typo3 phpmyadmin_4.5.0.t3x
  http://typo3.org/fileadmin/ter/p/h/phpmyadmin_4.5.0.t3x

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva phpMyAdmin-2.11.9.6-0.1.20060mlcs4.noarch.rpm
  http://www.mandriva.com/en/download/

Typo3 phpMyAdmin 4.1

• Typo3 phpmyadmin_4.5.0.t3x
  http://typo3.org/fileadmin/ter/p/h/phpmyadmin_4.5.0.t3x

Typo3 phpMyAdmin 4.1.1

• Typo3 phpmyadmin_4.5.0.t3x
  http://typo3.org/fileadmin/ter/p/h/phpmyadmin_4.5.0.t3x

Typo3 phpMyAdmin 4.2

• Typo3 phpmyadmin_4.5.0.t3x
  http://typo3.org/fileadmin/ter/p/h/phpmyadmin_4.5.0.t3x

Typo3 phpMyAdmin 4.3

• Typo3 phpmyadmin_4.5.0.t3x
  http://typo3.org/fileadmin/ter/p/h/phpmyadmin_4.5.0.t3x