[Phpmyadmin-devel] phpMyAdmin security alert PMASA-2005-3
DelislMa at CollegeSherbrooke.qc.ca
Sun Apr 3 16:17:28 CEST 2005
phpMyAdmin security announcement PMASA-2005-3
Cross-Site Scripting vulnerability
We received a security advisory from Oriol Torrent Santiago and we wish to thank him for his work
and report. The convcharset parameter was not correctly validated, opening the door to a XSS attack.
We consider this vulnerability to be serious.
Probably all phpMyAdmin versions before 2.6.2-rc1.
Upgrade to phpMyAdmin 2.6.2-rc1 or newer.
For further information and in case of questions, please contact the phpMyAdmin team. Our website is
More information about the Developers