phpMyAdmin / Bugs / #2391 (ok 2.10.1) XSS in PMA_sanitize()

#2391 (ok 2.10.1) XSS in PMA_sanitize()

Milestone: 2.10.0.2

Status: fixed

Owner: Sebastian Mendel

Labels: Security / Restrictions (52)

Priority: 1

Updated: 2013-06-11

Created: 2007-03-13

Creator: Sebastian Mendel

Private: No

PMA_sanitize() does not remove JavaScript from links

Discussion

Sebastian Mendel - 2007-03-13

patch file, should work for all versions since 2.9

pma_sanitize_xss.patch

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Sebastian Mendel - 2007-03-13

status: open --> open-fixed
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Sebastian Mendel - 2007-03-13

Logged In: YES
user_id=326580
Originator: YES

File Added: pma_sanitize_xss.patch

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Sebastian Mendel - 2007-03-13

priority: 9 --> 1

summary: XSS in PMA_sanitize() --> (ok 2.10.0.3) XSS in PMA_sanitize()
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Sebastian Mendel - 2007-03-13

Logged In: YES
user_id=326580
Originator: YES

thanks for reporting to sp3x SecurityReasons

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Marc Delisle - 2007-04-17

Logged In: YES
user_id=210714
Originator: NO

File Added: pma_sanitize_xss2.patch

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Marc Delisle - 2007-04-17

latest patch for 2.10.0.2

pma_sanitize_xss2.patch

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Marc Delisle - 2007-04-28

summary: (ok 2.10.0.3) XSS in PMA_sanitize() --> (ok 2.10.1) XSS in PMA_sanitize()
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Marc Delisle - 2007-04-28

status: open-fixed --> closed-fixed
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Michal Čihař - 2013-06-11

Status: closed-fixed --> fixed
If you would like to refer to this comment somewhere else in this project, copy and paste the following link: