phpmyadmin/composer · Security
phpMyAdmin Open Redirect in redirector
- GHSA ID
- GHSA-v6fw-xf2c-8q43
- CVE ID
- CVE-2011-1941
- Severity
- medium
- Published
- Updated
Description
Open redirect vulnerability in the redirector feature in phpMyAdmin 3.4.x before 3.4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CWEs
- CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
References
- https://nvd.nist.gov/vuln/detail/CVE-2011-1941 ↗
- http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commitdiff;h=b7a8179eb6bf0f1643970ac57a70b5b513a1cd4f ↗
- http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commitdiff;h=ecfc8ba4f7b4ea612c58ab5726054ed0f28e200d ↗
- http://www.phpmyadmin.net/home_page/security/PMASA-2011-4.php ↗
- https://github.com/phpmyadmin/composer/commit/b7a8179eb6bf0f1643970ac57a70b5b513a1cd4f ↗
- https://github.com/phpmyadmin/composer/commit/ecfc8ba4f7b4ea612c58ab5726054ed0f28e200d ↗
- https://github.com/advisories/GHSA-v6fw-xf2c-8q43 ↗