[security] Fix control user SQL injection in pmd_pdf.php, see PMASA-2013-15

2013-07-23 08:35:07 -04:00 · 2013-07-23 08:35:07 -04:00 · 974d0dedee
commit 974d0dedee
parent 257bd7349c
2 changed files with 8 additions and 0 deletions
--- a/1
+++ b/1
@ -6,6 +6,7 @@ phpMyAdmin - ChangeLog
 - [security] Fix stored XSS in navigation panel logo link, see PMASA-2013-9
 - [security] Fix self-XSS in setup, trusted proxies validation, see PMASA-2013-9
 - [security] Fix full path disclosure, see PMASA-2013-12
+- [security] Fix control user SQL injection in pmd_pdf.php, see PMASA-2013-15

 4.0.4.1 (2013-06-30)
 - [security] Global variables scope injection vulnerability (see PMASA-2013-7)
--- a/pmd_pdf.php
+++ b/pmd_pdf.php
@ -8,6 +8,13 @@
 require_once './libraries/common.inc.php';
 require_once 'libraries/pmd_common.php';

+/**
+ * Validate vulnerable POST parameters
+ */
+if (isset($_POST['scale']) && ! PMA_isValid($_POST['scale'], 'numeric')) {
+    die('Attack stopped');
+}
+
 /**
  * Sets globals from $_POST
  */