Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2008-4326HistorySep 30, 2008 - 4:13 p.m.
CVE-2008-4326
2008-09-3016:13:00
Debian Security Bug Tracker
security-tracker.debian.org
14
0.004 Low
EPSS
Percentile
74.1%
The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a “</script” sequence.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | phpmyadmin | < 4:2.11.8.1-3 | phpmyadmin_4:2.11.8.1-3_all.deb |
| Debian | 11 | all | phpmyadmin | < 4:2.11.8.1-3 | phpmyadmin_4:2.11.8.1-3_all.deb |
| Debian | 999 | all | phpmyadmin | < 4:2.11.8.1-3 | phpmyadmin_4:2.11.8.1-3_all.deb |
| Debian | 13 | all | phpmyadmin | < 4:2.11.8.1-3 | phpmyadmin_4:2.11.8.1-3_all.deb |
Related
ubuntucve
ubuntucve
CVE-2008-4326
2008-09-30 00:00:00
phpmyadmin
phpmyadmin
XSS for Microsoft Internet Explorer on several places
2008-09-23 00:00:00
openvas
openvas
FreeBSD Ports: phpMyAdmin
2008-09-24 00:00:00
Debian Security Advisory DSA 1675-1 (phpmyadmin)
2008-12-03 00:00:00
Debian: Security Advisory (DSA-1675-1)
2008-12-03 00:00:00
cve
cve
CVE-2008-4326
2008-09-30 16:13:00
nessus
nessus
Debian DSA-1675-1 : phpmyadmin - insufficient input sanitising
2008-12-03 00:00:00
openSUSE Security Update : phpMyAdmin (phpMyAdmin-442)
2009-07-21 00:00:00
openSUSE 10 Security Update : phpMyAdmin (phpMyAdmin-5935)
2009-01-22 00:00:00
jvn
jvn
JVN#54824688 phpMyAdmin cross-site scripting vulnerability
2008-09-26 00:00:00
prion
prion
Cross site scripting
2008-09-30 16:13:00
debian
debian
[SECURITY] [DSA 1675-1] New phpmyadmin packages fix cross site scripting
2008-11-30 13:26:36
redhatcve
redhatcve
CVE-2008-4326
2019-10-04 20:33:32