PhpMyAdmin man-in-the-middle attack Vulnerability

Vulnerability title phpMyAdmin man-in-the-middle attack Vulnerability
Moderate hazard level
Public for the first time? No
Release date:
Cause of vulnerability design error
Affected Product Version
PhpMyAdmin 3.5.x
 
Vulnerability description phpMyAdmin is a PHP-based MySQL management program. To display the current phpMyAdmin version on the homepage, JavaScript code is obtained from the phpmyadmin.net website in non-SSL mode. Attackers can modify this code through man-in-the-middle attacks to perform cross-site scripting and other attacks.

Cve id: CVE-2012-5368
Http://www.phpmyadmin.net/home_page/security/PMASA-2012-7.php

No verification information
 
Vulnerability solution phpMyAdmin 3.5.3 has fixed this vulnerability, it is recommended that users download to use: http://www.phpmyadmin.net