ID de Prueba:	1.3.6.1.4.1.25623.1.0.100307
Categoría:	Web application abuses
Título:	phpMyAdmin Unspecified SQL Injection and Cross Site Scripting Vulnerabilities
Resumen:	phpMyAdmin is prone to SQL-injection and cross-site scripting; vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Descripción:	Summary: phpMyAdmin is prone to SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Vulnerability Impact: Exploiting these issues could allow an attacker to steal cookie- based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Affected Software/OS: Versions prior to phpMyAdmin 2.11.9.6 and 3.2.2.1 are affected. Solution: Vendor updates are available. Please see the references for details. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3696 BugTraq ID: 36658 http://www.securityfocus.com/bid/36658 https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:274 http://marc.info/?l=oss-security&m=125553728512853&w=2 http://marc.info/?l=oss-security&m=125561979001460&w=2 http://secunia.com/advisories/37016 SuSE Security Announcement: SUSE-SR:2009:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html http://www.vupen.com/english/advisories/2009/2899 XForce ISS Database: phpmyadmin-tablename-xss(53742) https://exchange.xforce.ibmcloud.com/vulnerabilities/53742 Common Vulnerability Exposure (CVE) ID: CVE-2009-3697 XForce ISS Database: phpmyadmin-pdf-sql-injection(53741) https://exchange.xforce.ibmcloud.com/vulnerabilities/53741
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.