----------------------------------------------------------------------

Want a new job?

http://secunia.com/secunia_security_specialist/
http://secunia.com/hardcore_disassembler_and_reverse_engineer/

International Partner Manager - Project Sales in the IT-Security
Industry:
http://corporate.secunia.com/about_secunia/64/

----------------------------------------------------------------------

TITLE:
phpMyAdmin Cross-Site Scripting and Spoofing

SECUNIA ADVISORY ID:
SA31263

VERIFY ADVISORY:
http://secunia.com/advisories/31263/

CRITICAL:
Not critical

IMPACT:
Cross Site Scripting, Spoofing

WHERE:
>From remote

SOFTWARE:
phpMyAdmin 2.x
http://secunia.com/product/1720/

DESCRIPTION:
Aung Khant has reported two vulnerabilities in phpMyAdmin, which can
be exploited by malicious local users to conduct cross-site scripting
attacks, and by malicious people to conduct spoofing attacks.

1) Many scripts except for index.php do not check if they are linked
into another site's frames. This can potentially be used for spoofing
and phishing attacks.

2) Input from the config/config.inc.php configuration file to
scripts/setup.php is not properly sanitised before being returned to
the user. This can be exploited to execute arbitrary HTML and script
code in a user's browser session in context of an affected site.

The vulnerabilities are reported in all 2.x versions before 2.11.8.
Other versions may also be affected.

SOLUTION:
Update to version 2.11.8 or later.

PROVIDED AND/OR DISCOVERED BY:
Aung Khant, YGN Ethical Hacker Group

ORIGINAL ADVISORY:
PMASA-2008-6:
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-6

Aung Khant:
http://yehg.net/lab/pr0js/advisories/Cross-Site_Framing_inphpMyAdmin2.11.7.pdf
http://yehg.net/lab/pr0js/advisories/XSS_inPhpMyAdmin2.11.7.pdf

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------