PhpMyAdmin released a new version, 3.4.4 and 3.3.10.4.
Including a security fix for a bunch of XSS vulns concerning the Tracking-Feature
.
Because they did not include the link to my advisory, I’ll make them available here. Enjoy
- http://fd.the-wildcat.de/pma_e36aa9e2e0.php – phpMyAdmin – Tracking – XSS
- And, as always thanks to the phpMyAdmin Security-Team for the prompt reaction
- PMASA-2011-13
Some shameless self promotion:
Need help securing your (web) applications? Write an e-mail to wildcat at the-wildcat dot de or contact me on XING
