[Phpmyadmin-devel] Re: Security announcements

[Michal Čihař]

On Mon 21. 11. 2005 01:14, Michal Čihař wrote:
> another point on security: some of issues that has been fixed in
> "normal" release do not have security announcement, this should be
> also fixed.

Eh, I just found one :-). XSS in index.php on HTTP_HOST...

-- 
    Michal Čihař | http://cihar.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.phpmyadmin.net/pipermail/developers/attachments/20051121/d41d3b87/attachment.sig>