Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can use several vulnerabilities of phpMyAdmin.
Impacted products: Fedora, MBS, openSUSE, phpMyAdmin, TYPO3
Extensions

Severity: 2/4

Creation date: 03/12/2014

DESCRIPTION OF THE VULNERABILITY

Several vulnerabilities were announced in phpMyAdmin.

An attacker can use a long password, in order to trigger a denial
of service. [severity:2/4; CVE-2014-9218, PMASA-2014-17]

An attacker can trigger a Cross Site Scripting in the redirection
mechanism, in order to execute JavaScript code in the context of
the web site. [severity:2/4; CVE-2014-9219, PMASA-2014-18]

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/phpMyAdmin-two-vulnerabilities-15737