diff --git a/ChangeLog b/ChangeLog index dba53b3725..bc236b5bdd 100644 --- a/ChangeLog +++ b/ChangeLog @@ -147,6 +147,10 @@ phpMyAdmin - ChangeLog - issue #11448 Clarify doc about the MemoryLimit directive - issue #11489 Cannot copy a database under certain conditions +4.4.15.1 (2015-10-23) +- issue #11464 phpMyAdmin suggests upgrading to newer version not usable on that system +- issue [security] Content spoofing on url.php + 4.4.15.0 (2015-09-20) - issue #11411 Undefined "replace" function on numeric scalar - issue #11421 Stored-proc / routine - broken parameter parsing diff --git a/url.php b/url.php index eec78a52b1..9c4c8846b6 100644 --- a/url.php +++ b/url.php @@ -32,6 +32,7 @@ if (! PMA_isValid($_REQUEST['url']) } "; // Display redirecting msg on screen. - printf(__('Taking you to %s.'), htmlspecialchars($_REQUEST['url'])); + // Do not display the value of $_REQUEST['url'] to avoid showing injected content + echo __('Taking you to the target site.'); } die();