Open redirect vulnerability in the redirector feature in phpMyAdmin 3.4.x before 3.4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

The remote host contains a version of phpMyAdmin - 3.3.x less than 3.3.10.1 or 3.4.x less than 3.4.1 - that is affected by multiple vulnerabilities:

  - The scripts 'tbl_links.php' and 'tbl-tracking' fail to     filter input to the 'table' and 'db' parameters.  An     attacker may be able to exploit this issue to inject     arbitrary HTML and script code into a user's browser,     to be executed within the security context of the     affected application, resulting in the theft of session     cookies and a compromise of a user's account.
    (Issue #2011-03)

  - For versions 3.4.x < 3.4.1, the script 'url.php' fails     to validate input to the 'url' parameter before     redirecting to a specified location. (Issue #2011-04)

The version of phpMyAdmin on the remote host fails to validate input passed to the 'url' parameter in the 'url.php' script before redirecting to a specified location.

An attacker may be able to exploit this issue to conduct phishing attacks by tricking users into visiting malicious websites.

Versions of phpMyAdmin 3.3.x earlier than 3.3.10.1 and 3.4.x earlier than 3.4.1 are potentially affected by multiple vulnerabilities : 

  - It is possible to create a crafted table name that could lead to a cross-site scripting attack. (PMASA-2011-3)

  - It is possible to redirect to an arbitrary, untrusted site, leading to a possible phishing site. (PMASA-2011-4)

ID	Name	Product	Family	Severity
55023	phpMyAdmin < 3.3.10.1 / 3.4.1 Multiple Vulnerabilities (PMASA-2011-03 - PMASA-2011-04	Nessus	CGI abuses	medium
54630	phpMyAdmin url.php Redirect (PMASA-2011-4)	Nessus	CGI abuses	medium
5930	phpMyAdmin 3.3.x < 3.3.10.1 / 3.4.x < 3.4.1 Multiple Vulnerabilities	Nessus Network Monitor	CGI	low

Detections

Analytics

CVE-2011-1941

medium

Tenable Plugins

medium

medium

low