Author: nion Date: 2008-08-08 09:37:50 +0000 (Fri, 08 Aug 2008) New Revision: 9537 Modified: data/CVE/list Log: CVE-2008-3457 non-issue but fixed in phpmyadmin 4:2.11.8~rc1-1 Modified: data/CVE/list ==================================================================--- data/CVE/list 2008-08-08 08:45:27 UTC (rev 9536) +++ data/CVE/list 2008-08-08 09:37:50 UTC (rev 9537) @@ -55,7 +55,8 @@ CVE-2008-3458 (Vtiger CRM before 5.0.4 stores sensitive information under the web ...) NOT-FOR-US: Vtiger CRM CVE-2008-3457 (Cross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin ...) - TODO: check + - phpmyadmin 4:2.11.8~rc1-1 (unimportant) + NOTE: if an attacker can write arbitrary content to config/config.php you have way more problems than this XSS CVE-2008-3455 (PHP remote file inclusion vulnerability in include/admin.php in ...) NOT-FOR-US: JnSHosts PHP Hosting Directory CVE-2008-3454 (JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass ...)