[bug-notifications] [phpmyadmin 0004857]: Exploit in the wild for phpmyadmin

[Mantis Bug Tracker]

The following issue has been CLOSED 
====================================================================== 
https://www.opencsw.org/mantis/view.php?id=4857 
====================================================================== 
Reported By:                bwalton
Assigned To:                bonivart
====================================================================== 
Project:                    phpmyadmin
Issue ID:                   4857
Category:                   upgrade
Reproducibility:            always
Severity:                   major
Priority:                   high
Status:                     closed
Resolution:                 open
Fixed in Version:           
====================================================================== 
Date Submitted:             2011-11-07 21:34 CET
Last Modified:              2011-11-09 09:09 CET
====================================================================== 
Summary:                    Exploit in the wild for phpmyadmin
Description: 
Hi Peter,

There is an in the wild exploit for phpmyadmin right now:
http://www.phpmyadmin.net/home_page/security/PMASA-2011-10.php
http://www.phpmyadmin.net/home_page/security/PMASA-2011-5.php

Time for an upgrade (and likely a notice on users@/announce@?)

Thanks
-Ben
====================================================================== 

---------------------------------------------------------------------- 
 (0009392) bonivart (manager) - 2011-11-08 09:17
 https://www.opencsw.org/mantis/view.php?id=4857#c9392 
---------------------------------------------------------------------- 
Luckily I had 3.4.5 sitting in experimental so I just uploaded it to
unstable.