Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
146377 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.68572
Categoría:Mandrake Local Security Checks
Título:Mandriva Security Advisory MDVSA-2010:244 (phpmyadmin)
Resumen:NOSUMMARY
Descripción:Description:
The remote host is missing an update to phpmyadmin
announced via advisory MDVSA-2010:244.

A vulnerability has been found and corrected in phpmyadmin:

It was possible to conduct a XSS attack using spoofed request on the
db search script (CVE-2010-4329).

This upgrade provides the latest phpmyadmin versions which is not
vulnerable to this security issue.

Affected: Corporate 4.0, Enterprise Server 5.0

Solution:
To upgrade automatically use MandrakeUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2010:244
http://www.phpmyadmin.net/home_page/security/PMASA-2010-8.php

Risk factor : Medium

CVSS Score:
4.3

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2010-4329
BugTraq ID: 45100
http://www.securityfocus.com/bid/45100
Debian Security Information: DSA-2139 (Google Search)
http://www.debian.org/security/2010/dsa-2139
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051942.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051956.html
http://www.mandriva.com/security/advisories?name=MDVSA-2010:244
http://www.osvdb.org/69516
http://secunia.com/advisories/42408
http://secunia.com/advisories/42477
http://secunia.com/advisories/42725
http://www.vupen.com/english/advisories/2010/3082
http://www.vupen.com/english/advisories/2010/3087
http://www.vupen.com/english/advisories/2010/3158
http://www.vupen.com/english/advisories/2011/0001
CopyrightCopyright (c) 2010 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.