phpMyAdmin is prone to multiple input-validation vulnerabilities, including a cross-site scripting and a SQL-injection issue. A successful exploit may allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. These issues affect versions prior to phpMyAdmin 2.11.2.1.

Vendor updates are available. Please see http://www.phpmyadmin.net for more Information.

• http://www.securityfocus.com/bid/26512

---

Updated on 2015-03-25