Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2008-4326

🗓️ 30 Sep 2008 16:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov👁 60 Views🌐 WEB

The PMA_escapeJsString function in libraries/js_escape.lib.php allows remote attackers to conduct XSS attacks

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Cvelist		CVE-2008-4326
30 Sep 200816:00
–cvelist
Debian		[SECURITY] [DSA 1675-1] New phpmyadmin packages fix cross site scripting
30 Nov 200812:53
–debian
Debian CVE		CVE-2008-4326
30 Sep 200816:00
–debiancve
Tenable Nessus		Debian DSA-1675-1 : phpmyadmin - insufficient input sanitising
3 Dec 200800:00
–nessus
Tenable Nessus		openSUSE Security Update : phpMyAdmin (phpMyAdmin-442)
21 Jul 200900:00
–nessus
Tenable Nessus		openSUSE 10 Security Update : phpMyAdmin (phpMyAdmin-5935)
22 Jan 200900:00
–nessus
EUVD		EUVD-2008-4307
7 Oct 202500:30
–euvd
Japan Vulnerability Notes		JVN#54824688 phpMyAdmin cross-site scripting vulnerability
26 Sep 200800:00
–jvn
Japan Vulnerability Notes		phpMyAdmin cross-site scripting vulnerability
26 Sep 200807:37
–jvn
NVD		CVE-2008-4326
30 Sep 200816:13
–nvd
Rows per page
NVD
Node
AND
OR
phpmyadminphpmyadminRange≤2.11.9.1
phpmyadminphpmyadminMatch2.0
phpmyadminphpmyadminMatch2.0.0
phpmyadminphpmyadminMatch2.0.1
phpmyadminphpmyadminMatch2.0.2
phpmyadminphpmyadminMatch2.0.3
phpmyadminphpmyadminMatch2.0.4
phpmyadminphpmyadminMatch2.0.5
phpmyadminphpmyadminMatch2.1
phpmyadminphpmyadminMatch2.1.0
phpmyadminphpmyadminMatch2.1.1
phpmyadminphpmyadminMatch2.1.2
phpmyadminphpmyadminMatch2.2
phpmyadminphpmyadminMatch2.2.0
phpmyadminphpmyadminMatch2.2.0_pre1
phpmyadminphpmyadminMatch2.2.0_pre2
phpmyadminphpmyadminMatch2.2.0_rc1
phpmyadminphpmyadminMatch2.2.0_rc2
phpmyadminphpmyadminMatch2.2.0_rc3
phpmyadminphpmyadminMatch2.2.2
phpmyadminphpmyadminMatch2.2.3
phpmyadminphpmyadminMatch2.2.4
phpmyadminphpmyadminMatch2.2.5
phpmyadminphpmyadminMatch2.2.6
phpmyadminphpmyadminMatch2.2.7_pl1
phpmyadminphpmyadminMatch2.2_pre1
phpmyadminphpmyadminMatch2.2_pre2
phpmyadminphpmyadminMatch2.2_rc1
phpmyadminphpmyadminMatch2.2_rc2
phpmyadminphpmyadminMatch2.2_rc3
phpmyadminphpmyadminMatch2.3.1
phpmyadminphpmyadminMatch2.3.2
phpmyadminphpmyadminMatch2.4.0
phpmyadminphpmyadminMatch2.5.0
phpmyadminphpmyadminMatch2.5.1
phpmyadminphpmyadminMatch2.5.2
phpmyadminphpmyadminMatch2.5.2_pl1
phpmyadminphpmyadminMatch2.5.3
phpmyadminphpmyadminMatch2.5.4
phpmyadminphpmyadminMatch2.5.5
phpmyadminphpmyadminMatch2.5.5_pl1
phpmyadminphpmyadminMatch2.5.5_rc1
phpmyadminphpmyadminMatch2.5.5_rc2
phpmyadminphpmyadminMatch2.5.6_rc1
phpmyadminphpmyadminMatch2.5.6_rc2
phpmyadminphpmyadminMatch2.5.7
phpmyadminphpmyadminMatch2.5.7_pl1
phpmyadminphpmyadminMatch2.6.0_pl1
phpmyadminphpmyadminMatch2.6.0_pl2
phpmyadminphpmyadminMatch2.6.0_pl3
phpmyadminphpmyadminMatch2.6.1
phpmyadminphpmyadminMatch2.6.1_pl1
phpmyadminphpmyadminMatch2.6.1_pl3
phpmyadminphpmyadminMatch2.6.1_rc1
phpmyadminphpmyadminMatch2.6.2
phpmyadminphpmyadminMatch2.6.2_dev
phpmyadminphpmyadminMatch2.6.2_pl1
phpmyadminphpmyadminMatch2.6.2_rc1
phpmyadminphpmyadminMatch2.6.3
phpmyadminphpmyadminMatch2.6.3_pl1
phpmyadminphpmyadminMatch2.6.4
phpmyadminphpmyadminMatch2.6.4_pl1
phpmyadminphpmyadminMatch2.6.4_pl2
phpmyadminphpmyadminMatch2.6.4_pl3
phpmyadminphpmyadminMatch2.6.4_pl4
phpmyadminphpmyadminMatch2.6.4_rc1
phpmyadminphpmyadminMatch2.7
phpmyadminphpmyadminMatch2.7.0
phpmyadminphpmyadminMatch2.7.0_beta1
phpmyadminphpmyadminMatch2.7.0_pl1
phpmyadminphpmyadminMatch2.7.0_pl2
phpmyadminphpmyadminMatch2.7.0_rc1
phpmyadminphpmyadminMatch2.7_pl1
phpmyadminphpmyadminMatch2.8.0
phpmyadminphpmyadminMatch2.8.0.1
phpmyadminphpmyadminMatch2.8.0.2
phpmyadminphpmyadminMatch2.8.0.3
phpmyadminphpmyadminMatch2.8.1
phpmyadminphpmyadminMatch2.8.1_dev
phpmyadminphpmyadminMatch2.8.2
phpmyadminphpmyadminMatch2.8.3
phpmyadminphpmyadminMatch2.8.4
phpmyadminphpmyadminMatch2.9
phpmyadminphpmyadminMatch2.9.0
phpmyadminphpmyadminMatch2.9.0.1
phpmyadminphpmyadminMatch2.9.0.2
phpmyadminphpmyadminMatch2.9.0.3
phpmyadminphpmyadminMatch2.9.0_beta1
phpmyadminphpmyadminMatch2.9.0_dev
phpmyadminphpmyadminMatch2.9.0_rc1
phpmyadminphpmyadminMatch2.9.1
phpmyadminphpmyadminMatch2.9.1.1
phpmyadminphpmyadminMatch2.9.1_rc1
phpmyadminphpmyadminMatch2.9.1_rc2
phpmyadminphpmyadminMatch2.9.2
phpmyadminphpmyadminMatch2.9_rc1
phpmyadminphpmyadminMatch2.10.0
phpmyadminphpmyadminMatch2.10.0.0
phpmyadminphpmyadminMatch2.10.0.1
phpmyadminphpmyadminMatch2.10.0.2
phpmyadminphpmyadminMatch2.10.1
phpmyadminphpmyadminMatch2.10.01
phpmyadminphpmyadminMatch2.10.1.0
phpmyadminphpmyadminMatch2.10.2
phpmyadminphpmyadminMatch2.10.2.0
phpmyadminphpmyadminMatch2.10.3
phpmyadminphpmyadminMatch2.10.3.0
phpmyadminphpmyadminMatch2.10.3rc1
phpmyadminphpmyadminMatch2.11.0
phpmyadminphpmyadminMatch2.11.0.0
phpmyadminphpmyadminMatch2.11.0beta1
phpmyadminphpmyadminMatch2.11.0rc1
phpmyadminphpmyadminMatch2.11.1
phpmyadminphpmyadminMatch2.11.1.0
phpmyadminphpmyadminMatch2.11.1.1
phpmyadminphpmyadminMatch2.11.1.2
phpmyadminphpmyadminMatch2.11.1rc1
phpmyadminphpmyadminMatch2.11.2
phpmyadminphpmyadminMatch2.11.2.0
phpmyadminphpmyadminMatch2.11.2.1
phpmyadminphpmyadminMatch2.11.2.2
phpmyadminphpmyadminMatch2.11.3
phpmyadminphpmyadminMatch2.11.3.0
phpmyadminphpmyadminMatch2.11.3rc1
phpmyadminphpmyadminMatch2.11.4
phpmyadminphpmyadminMatch2.11.4.0
phpmyadminphpmyadminMatch2.11.4rc1
phpmyadminphpmyadminMatch2.11.5
phpmyadminphpmyadminMatch2.11.5.0
phpmyadminphpmyadminMatch2.11.5.1
phpmyadminphpmyadminMatch2.11.5.2
phpmyadminphpmyadminMatch2.11.5rc1
phpmyadminphpmyadminMatch2.11.6
phpmyadminphpmyadminMatch2.11.6rc1
phpmyadminphpmyadminMatch2.11.7
phpmyadminphpmyadminMatch2.11.7.0
phpmyadminphpmyadminMatch2.11.8
phpmyadminphpmyadminMatch2.11.9
microsoftinternet_explorer
ParameterPositionPathDescriptionCWE
NUL byte bypass in </script> sequencepathlibraries/js_escape.lib.phpXSS vulnerability in phpMyAdmin via NUL byte in a </script> sequence in IE, bypassing XSS protections.CWE-79
input handling in js_escape.lib.phppathlibraries/js_escape.lib.phpXSS vulnerability in phpMyAdmin via NUL byte in a </script> sequence in IE, bypassing XSS protections.CWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Jun 2026 22:57Current
5.3Medium risk
Vulners AI Score5.3
CVSS 24.3
EPSS0.01865
CWE-79
cve-2008-4326phpmyadminxssnvdsecurity vulnerabilitycross-site scripting
60