From 440d7f209596aace26f5aa43d1eed71fcc7e25de Mon Sep 17 00:00:00 2001 From: Marc Delisle Date: Tue, 20 Nov 2007 12:55:14 +0000 Subject: [PATCH] bug #1835123 [security] fixed XSS vulnerability on login page, thanks to Tim Brown (Nth Dimension) for the advisory and to Sebastian for the fix --- ChangeLog | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/ChangeLog b/ChangeLog index dadb6622d..e50e649f9 100644 --- a/ChangeLog +++ b/ChangeLog @@ -41,6 +41,11 @@ $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyA - bug #1828265 [privileges] No weird characters in generated password - bug #1759194 [import] open_basedir warning +2.11.2.2 (2007-11-20) +- bug #1835123 [security] fixed XSS vulnerability on login page, + thanks to Tim Brown (Nth Dimension) for the advisory + and to Sebastian for the fix + 2.11.2.1 (2007-11-11) - fixed possible SQL injection using database name - fixed possible XSS in database name - thanks to Omer Singer, The DigiTrust Group