(ok 4.2.10.1) XSS in debug SQL output

A software tool to bring MySQL to the Web

Brought to you by: ibennetch, nijel

#4562 (ok 4.2.10.1) XSS in debug SQL output

Milestone: 4.0.0

Status: fixed

Owner: Madhura Jayaratne

Labels: security (4)

Priority: 1

Updated: 2014-10-21

Created: 2014-10-17

Creator: Madhura Jayaratne

Private: No

With a crafted database or table name it is possible to do an XSS when $cfg['DBG']['sql'] is enabled.

Discussion

Madhura Jayaratne - 2014-10-21

summary: XSS in debug SQL output --> (ok 4.2.10.1) XSS in debug SQL output

status: open --> fixed

private: Yes --> No

Priority: 5 --> 1
If you would like to refer to this comment somewhere else in this project, copy and paste the following link: