PMASA-2016-26
Announcement-ID: PMASA-2016-26
Date: 2016-06-23
Summary
Multiple XSS vulnerabilities
Description
- A vulnerability was reported allowing a specially crafted table name to cause an XSS attack through the functionality to check database privileges.
- This XSS doesn't exist in some translations due to different quotes being used there (eg. Czech).
- A vulnerability was reported allowing a specifically-configured MySQL server to execute an XSS attack. This particular attack requires configuring the MySQL server log_bin directive with the payload.
- Several XSS vulnerabilities were found with the Transformation feature
- Several XSS vulnerabilities were found in AJAX error handling
- Several XSS vulnerabilities were found in the Designer feature
- An XSS vulnerability was found in the charts feature
- An XSS vulnerability was found in the zoom search feature
Severity
We consider these attacks to be of moderate severity.
Affected Versions
All 4.6.x versions (prior to 4.6.3), 4.4.x versions (prior to 4.4.15.7), and 4.0.x versions (prior to 4.0.10.16) are affected
Solution
Upgrade to phpMyAdmin 4.6.3, 4.4.15.7, or 4.0.10.16 or newer or apply patches listed below.
References
Thanks to Emanuel Bronshtein @e3amn2l, Nils Juenemann @totally_unknown and Mario Heiderich, Cure53 for reporting these vulnerabilities.
Assigned CVE IDs: CVE-2016-5733
CWE IDs: CWE-661
Patches
The following commits have been made on the 4.0 branch to fix this issue:
The following commits have been made on the 4.4 branch to fix this issue:
The following commits have been made on the 4.6 branch to fix this issue:
More information
For further information and in case of questions, please contact the phpMyAdmin security team at security@phpmyadmin.net.