Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
http://www.phpmyadmin.net/home_page/security/PMASA-2011-18.php http://www.vuxml.org/freebsd/ed536336-1c57-11e1-86f4-e0cb4e266481.html
Insight
The following package is affected: phpMyAdmin
CVE-2011-4634
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.8 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted database name, related to the Database Synchronize panel
(2) a crafted database name, related to
the Database rename panel
(3) a crafted SQL query, related to the
table overview panel
(4) a crafted SQL query, related to the view
creation dialog
(5) a crafted column type, related to the table
search dialog
or (6) a crafted column type, related to the create index dialog.
Severity
Classification
-
CVE CVE-2011-4634 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related Vulnerabilities