Announcement-ID: PMASA-2006-1
Date: 2006-04-06
XSS vulnerabilities
It was possible to conduct an XSS attack with a direct call to some scripts under the themes directory. We wish to thank Toni Koivunen/CERT-FI for this advisory.
We consider these vulnerabilities to be serious.
All previous versions that support theming are affected.
Upgrade to phpMyAdmin 2.8.0.3 for the fixes in the two included themes. New versions of the custom themes will be posted on our themes download page.
Assigned CVE ids: CVE-2006-1678
For further information and in case of questions, please contact the phpMyAdmin team. Our website is http://www.phpmyadmin.net.