Bug 237882 (CVE-2007-2245)

Summary:	CVE-2007-2245: phpMyAdmin < 2.10.1 XSS vulnerabilities
Product:	[Fedora] Fedora	Reporter:	Ville Skyttä <ville.skytta>
Component:	phpMyAdmin	Assignee:	Mike McGrath <mmcgrath>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	6	CC:	fedora-security-list, redhat-bugzilla
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	phpMyAdmin-2.11.2-1.fc7	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-11-01 20:39:21 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Ville Skyttä 2007-04-25 20:39:33 UTC

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-2245

"Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before
2.10.1.0 allow remote attackers to inject arbitrary web script or HTML via (1)
the fieldkey parameter to browse_foreigners.php or (2) certain input to the
PMA_sanitize function."

Comment 1 Tomas Hoger 2007-10-18 08:04:21 UTC

As both F7 and FC6 extras have 2.11.0, I believe this should be fixed now.  Mike?

Comment 2 Mike McGrath 2007-10-29 13:12:17 UTC

*** Bug 356291 has been marked as a duplicate of this bug. ***