Back to search
CVE-2008-4326
Published: Sep 30, 2008
Modified: Aug 7, 2024
PUBLISHED
Description
The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "</script" sequence.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://typo3.org/teams/security/security-bulletins/typo3-20080924-1/
x_refsource_CONFIRM
DSA-1675
vendor-advisory
x_refsource_DEBIAN
ADV-2008-2657
vdb-entry
x_refsource_VUPEN
SUSE-SR:2009:003
vendor-advisory
x_refsource_SUSE
http://www.phpmyadmin.net/home_page/downloads.php?relnotes=1
x_refsource_CONFIRM
48511
vdb-entry
x_refsource_OSVDB
[oss-security] 20080923 CVE req: phpmyadmin < 2.11.9.2 xss
mailing-list
x_refsource_MLIST
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-8
x_refsource_CONFIRM
33822
third-party-advisory
x_refsource_SECUNIA
JVNDB-2008-000061
third-party-advisory
x_refsource_JVNDB
32954
third-party-advisory
x_refsource_SECUNIA
31974
third-party-advisory
x_refsource_SECUNIA
JVN#54824688
third-party-advisory
x_refsource_JVN
31992
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now