Download phpMyAdmin 2.8.0.3

The developers of phpMyAdmin just released a third update of version 2.8.0 with 2.8.0.3 as the version number. This program consists of a collection of PHP scripts that allow to maintain and manage a MySQL database or server via a web interface. For example, it is possible to create, modify and delete databases and tables. The developers have fixed a security vulnerability and described it as follows:

Version 2.8.0.3 contains a security fix.

Announcement ID: PMASA-2006-1

Summary: XSS vulnerabilities

Description: It was possible to conduct an XSS attack with a direct call to some scripts under the themes directory. We wish to thank Toni Koivunen/CERT-FI for this advisory.

Severity: We consider these vulnerabilities to be serious.

Affected versions: All previous versions that support theming are affected.

Solution: Upgrade to phpMyAdmin 2.8.0.3 for the fixes in the two included themes. New versions of the custom themes will be posted on our themes download page.