FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The last vuln.xml file processed by FreshPorts is:

Revision:  318524
Date:      2013-05-19
Time:      14:06:36Z
Committer: rakuco

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
ef417da3-1640-11e2-999b-e0cb4e266481phpMyAdmin -- Multiple XSS due to unescaped HTML output in Trigger, Procedure and Event pages and Fetching the version information from a non-SSL site is vulnerable to a MITM attack

The phpMyAdmin development team reports:

When creating/modifying a trigger, event or procedure with a crafted name, it is possible to trigger an XSS.

To display information about the current phpMyAdmin version on the main page, a piece of JavaScript is fetched from the phpmyadmin.net website in non-SSL mode. A man-in-the-middle could modify this script on the wire to cause mischief.


Discovery 2012-10-08
Entry 2012-10-14
phpMyAdmin
ge 3.5 lt 3.5.3

CVE-2012-5339
http://www.phpmyadmin.net/home_page/security/PMASA-2012-6.php
CVE-2012-5368
http://www.phpmyadmin.net/home_page/security/PMASA-2012-7.php