CVE-2008-4326 in phpMyAdmin

Resumen (Inglés)

The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "</script" sequence.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2008-09-30

Divulgación

2008-09-30

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
3836	phpMyAdmin PMA_escapeJsString secuencias de comandos en sitios cruzados	79	Prueba de concepto	Arreglo oficial	CVE-2008-4326

Fuentes

• MITRE
• NVD
• CVE Details