[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
xss in phpmyadmin >=2.8.0 and < 2.10.0
This xss (with xsrf possibility) works only when logged in, but since in many places anonymous logins are allowed and many webhost companies offer just 1 or few phpmyadmins for a large number of users, i consider it worth to be published.
Theoretically it is possible to obtain and use the cookie and token variables (which are necessary to get this XSS working) but i haven't made a working poc atm, but i'm sure others will have the capability to do so.
More details can be found in an advisory found here:
possible attack strings could look like:
in each case if you're running phpmyadmin <= 2.9 it's wise to update, stefan esser has even used phpmyadmin as an example in one of the bugs he found and reported in (his) mopb over a week ago(
http://www.php-security.org/MOPB/MOPB-02-2007.html and http://www.phpmyadmin.net/)