gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Changelog entries for security release

Browse Source 
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
This commit is contained in:
Isaac Bennetch 2016-06-22 23:53:56 -04:00
parent e50e37b51d
commit f7d1c1f463
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
ChangeLog
View File

@ -14,6 +14,20 @@ phpMyAdmin - ChangeLog
- issue #12303 Fix table size calculation in some circumstances
- issue #12310 Fix listing routines for non privileged user
- issue Escape generated query in exporting a database
- issue Setup script doesn't use input type 'password' in all relevant locations
- issue [security] BBCode injection in setup script, see PMASA-2016-17
- issue [security] Cookie attribute injection attack, see PMASA-2016-18
- issue Redirect loop when directly calling url.php
- issue [security] SQL injection attack, see PMASA-2016-19
- issue [security] XSS attack in Table Structure page, see PMASA-2016-20
- issue [security] XSS attack in Server Privileges page, see PMASA-2016-21
- issue [security] DOS attack vulnerability, see PMASA-2016-22
- issue [security] Multiple full path disclosure vulnerabilities, see PMASA-2016-23
- issue [security] Full path disclosure when running in debug mode
- issue [security] XSS attack with partition range and table structure, see PMASA-2016-25
- issue [security] XSS attack when checking database privileges, see PMASA-2016-26
- issue [security] XSS attack when MySQL server is using a specific payload log_bin directive, see PMASA-2016-26
- issue [security] XSS vulnerabilities in Transformation feature, see PMASA-2016-26
4.6.2 (2016-05-25)
- issue [security] User SQL queries can be revealed through URL GET parameters, see PMASA-2016-14