nettika/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[security] XSS in a Designer component

Browse Source
This commit is contained in:
Marc Delisle
2008-10-30 12:47:24 +00:00
parent d848ff485b
commit 3d83805ab4
2 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ChangeLog
View File

@@ -9,6 +9,9 @@ $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyA
- [lang] Italian update, thanks to Luca and fantu - [lang] Italian update, thanks to Luca and fantu
- bug #2107583 [GUI] Leading newline truncated, thanks to Isart Montane - bug #2107583 [GUI] Leading newline truncated, thanks to Isart Montane
3.0.1.1 (2008-10-30)
- [security] XSS in a Designer component
3.0.1.0 (2008-10-22) 3.0.1.0 (2008-10-22)
- bug #2134126 [GUI] SQL error after sorting a subset - bug #2134126 [GUI] SQL error after sorting a subset
+ [lang] Catalan update, thanks to Xavier Navarro + [lang] Catalan update, thanks to Xavier Navarro
@@ -119,6 +122,9 @@ danbarry
- patch #2115966 [GUI] Checkboxes and IE 7, thanks to Martin - maschg - patch #2115966 [GUI] Checkboxes and IE 7, thanks to Martin - maschg
- bug #1914066 [core] ForceSSL generates incorrectly escaped redirections - bug #1914066 [core] ForceSSL generates incorrectly escaped redirections
2.11.9.3 (2008-10-30)
- [security] XSS in a Designer component
2.11.9.2 (2008-09-22) 2.11.9.2 (2008-09-22)
- [security] XSS in MSIE using NUL byte, thanks to JPCERT. - [security] XSS in MSIE using NUL byte, thanks to JPCERT.

3
pmd_pdf.php
View File

@@ -61,7 +61,8 @@ require_once './libraries/header_meta_style.inc.php';
<body> <body>
<br> <br>
<div> <div>
<form name="form1" method="post" action="pmd_pdf.php?server=<?php echo $server; ?>&db=<?php echo $db; ?>&token=<?php echo $token; ?>"> <form name="form1" method="post" action="pmd_pdf.php">
<?php echo PMA_generate_common_hidden_inputs($db); ?>
<div> <div>
<fieldset><legend><?php echo $GLOBALS['strExport'] . '/' . $GLOBALS['strImport']; ?></legend> <fieldset><legend><?php echo $GLOBALS['strExport'] . '/' . $GLOBALS['strImport']; ?></legend>
<p><?php echo $strExportImportToScale; ?>: <p><?php echo $strExportImportToScale; ?>: