phpMyAdmin

ソフト名：phpMyAdmin 3.4.0〜3.4.3.1

回避策：PMASA-2011-9, PMASA-2011-10, PMASA-2011-11, PMASA-2011-12にて対応

脆弱性：XSS, 機密情報の奪取, システムアクセス, 不正HTMLの実行, スクリプトコード実行, LFI, 不特定のエラー

ソース：

http://www.phpmyadmin.net/home_page/index.php

http://www.phpmyadmin.net/home_page/security/PMASA-2011-9.php

http://www.phpmyadmin.net/home_page/security/PMASA-2011-10.php

http://www.phpmyadmin.net/home_page/security/PMASA-2011-11.php

http://www.phpmyadmin.net/home_page/security/PMASA-2011-12.php

http://www.xxor.se/advisories/phpMyAdmin_3.x_Conditional_Session_Manipulation.txt

http://secunia.com/advisories/45365/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2642

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2643

CVE：CVE-2011-2642, CVE-2011-2643

危険性：High Risk