[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
about recent phpMyAdmin "vulnerabilities"
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: about recent phpMyAdmin "vulnerabilities"
- From: Marc Delisle <Marc.Delisle@xxxxxxxxxxxxxxxxxxxxx>
- Date: Fri, 24 Aug 2007 08:02:23 -0400
Hi,
On 2007-08-10, an advisory was published:
http://www.securityfocus.com/bid/25268
I don't consider these exploits to be a threat at all, because an
attacker has to know in advance the victim's phpMyAdmin token, which is
generated with
md5(uniqid(rand(), true))
Marc Delisle
phpMyAdmin project