diff options
| author |   Roy Li <rongqing.li@windriver.com> | 2014-10-30 13:37:27 +0800 |
|---|---|---|
| committer |   Paul Eggleton <paul.eggleton@linux.intel.com> | 2014-10-31 11:35:25 +0000 |
| commit | 6b530d936fcbf48bfe4a621d0ad2b3e61e728945 (patch) | |
| tree | 15c9d78b901419097fda8a79331f47f40417ac95 /meta-webserver/recipes-webadmin | |
| parent | 7edda3d9267cc3561151a5611a2d215848824423 (diff) | |
| download | meta-openembedded-contrib-6b530d936fcbf48bfe4a621d0ad2b3e61e728945.tar.gz | |
phpmyadmin: fix for Security Advisory CVE-2014-7217
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before
4.0.10.4, 4.1.x before 4.1.14.5, and 4.2.x before 4.2.9.1 allow remote
authenticated users to inject arbitrary web script or HTML via a crafted ENUM
value that is improperly handled during rendering of the (1) table search or (2)
table structure page, related to
libraries/TableSearch.class.php and libraries/Util.class.php.
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7217
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Diffstat (limited to 'meta-webserver/recipes-webadmin')
0 files changed, 0 insertions, 0 deletions