This bug was fixed in the package phpmyadmin - 4:2.9.1.1-2ubuntu1.2
---------------
phpmyadmin (4:2.9.1.1-2ubuntu1.2) feisty-security; urgency=low
* SECURITY UPDATE:
+ debian/patches/050_CVE-2008-1149.dpatch
- Provides unauthorized access, Allows partial confidentiality, integrity,
and
availability violation , Allows unauthorized disclosure of information ,
Allows disruption of service. (LP: #198745)
* References:
+ http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1149
+ http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-1
-- Emanuele Gentili <[EMAIL PROTECTED]> Tue, 11 Mar 2008
06:03:46 +0100
** Changed in: phpmyadmin (Ubuntu Feisty)
Status: Fix Committed => Fix Released
--
[phpmyadmin] [PMASA-2008-1] SQL injection vulnerability (Delayed Cross Site
Request Forgery)
https://bugs.launchpad.net/bugs/198745
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs