NVD

Id
4154  
Name
CVE-2008-4326  
Description
The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "</script" sequence.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-09-30  
Modified Date
2011-03-07  
Seq
2008-4326  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26517 4154 CVE-2008-4326 JVN#54824688  View
26518 4154 CVE-2008-4326 JVNDB-2008-000061  View
26519 4154 CVE-2008-4326 SUSE-SR:2009:003  View
26520 4154 CVE-2008-4326 http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_2_11_9/phpMyAdmin/libraries/js_escape.lib.php?r1=11514&r2=11603&pathrev=11603  View
26521 4154 CVE-2008-4326 http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/libraries/js_escape.lib.php?view=log&pathrev=11603  View
26522 4154 CVE-2008-4326 http://typo3.org/teams/security/security-bulletins/typo3-20080924-1/  View
26523 4154 CVE-2008-4326 DSA-1675  View
26524 4154 CVE-2008-4326 [oss-security] 20080923 CVE req: phpmyadmin < 2.11.9.2 xss  View
26525 4154 CVE-2008-4326 http://www.phpmyadmin.net/home_page/downloads.php?relnotes=1  View
26526 4154 CVE-2008-4326 http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-8  View
26527 4154 CVE-2008-4326 ADV-2008-2657  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45668 JVNDB-2008-000061 phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 The phpMyAdmin Project が提供する phpMyAdmin にはクロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-4326 34439 CVE-2008-4326 4154 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000061.html 2008-09-26 2008-09-26 View