NetSight
IP …
medium4.3

CVE-2008-4326

The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass…

Impact

The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "</script" sequence.

Affected products

VendorProductAffected versions
PhpmyadminPhpmyadmin
through 2.11.9.1
Versions 2.0, 2.0.0, 2.0.1, 2.0.2, 2.0.3

Weakness classification

CWE-79

References