CVE-2008-4326

The PMAescapeJsString function in libraries/jsescape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting XSS protection mechanisms and conduct XSS attacks via a NUL byte inside a "/script" sequence...

CVE-2008-4326

The CVE-2008-4326 vulnerability affects phpMyAdmin prior to 2.11.9.2 and arises from the PMA_escapeJsString function in libraries/js_escape.lib.php. When used with Internet Explorer, this allows remote XSS via a NUL byte inside a sequence, bypassing XSS protections. Public references in Debian/O...

CVE-2008-4326

The PMAescapeJsString function in libraries/jsescape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting XSS protection mechanisms and conduct XSS attacks via a NUL byte inside a "/script" sequence...

phpMyAdmin cross-site scripting vulnerability

Overview phpMyAdmin provided by The phpMyAdmin Project contains a cross-site scripting vulnerability. phpMyAdmin provided by The phpMyAdmin Project is software to handle the administration of MySQL over the web browser. phpMyAdmin contains a cross-site scripting vulnerability. Masako Oono of...

JVN#54824688 phpMyAdmin cross-site scripting vulnerability

phpMyAdmin provided by The phpMyAdmin Project is software to handle the administration of MySQL over the web browser. phpMyAdmin contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. According to the developer, Microsoft Internet...

[SECURITY] Fedora 9 Update: phpMyAdmin-2.11.9.1-1.fc9

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...

[SECURITY] Fedora 9 Update: phpMyAdmin-2.11.9.2-1.fc9

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...

[SECURITY] Fedora 8 Update: phpMyAdmin-2.11.9.2-1.fc8

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...

[SECURITY] Fedora 8 Update: phpMyAdmin-2.11.9.1-1.fc8

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...

Fedora 8 : phpMyAdmin-2.11.9.1-1.fc8 (2008-8269)

This update by upstream to phpMyAdmin 2.11.9.1 solves a not yet clearly specified code execution vulnerability. - auth Links to version number on login screen - core PMA does not start if iniset is disabled - bookmarks Saved queries greater than 1000 chars not displayed - export Export type...

phpMyAdmin PMA_escapeJsString()跨站脚本漏洞

BUGTRAQ ID: 31327 phpMyAdmin是用PHP编写的工具，用于通过WEB管理MySQL。 phpMyAdmin的libraries/jsescape.lib.php文件中的PMAescapeJsString函数存在跨站脚本漏洞。如果用户受骗访问了恶意网页的话，远程攻击者就可以绕过某些过滤器，在用户浏览器会话中执行任意HTML和脚本代码。 phpMyAdmin 2.11.9.2 phpMyAdmin ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Fedora 8 : phpMyAdmin-2.11.9.2-1.fc8 (2008-8286)

This update by upstream to phpMyAdmin 2.11.9.2 solves a not yet clearly specified XSS in MSIE using NUL byte vulnerability. - auth Links to version number on login screen - core PMA does not start if iniset is disabled - bookmarks Saved queries greater than 1000 chars not displayed - export Expor...

Fedora 9 : phpMyAdmin-2.11.9.2-1.fc9 (2008-8335)

This update by upstream to phpMyAdmin 2.11.9.2 solves a not yet clearly specified XSS in MSIE using NUL byte vulnerability. - auth Links to version number on login screen - core PMA does not start if iniset is disabled - bookmarks Saved queries greater than 1000 chars not displayed - export Expor...

Fedora 9 : phpMyAdmin-2.11.9.1-1.fc9 (2008-8370)

This update by upstream to phpMyAdmin 2.11.9.1 solves a not yet clearly specified code execution vulnerability. - auth Links to version number on login screen - core PMA does not start if iniset is disabled - bookmarks Saved queries greater than 1000 chars not displayed - export Export type...

TYPO3 Security Bulletin

It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to Cross-Site Scripting. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 3.3.0 and all versions below Vulnerability Type: Cross-Site...

Gentoo Security Advisory GLSA 200402-05 (phpmyadmin)

The remote host is missing updates announced in advisory GLSA 200402-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: phpMyAdmin

The remote host is missing an update to the system as announced in the referenced advisory. VID 74bf1594-8493-11dd-bb64-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 74bf1594-8493-11dd-bb64-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Gentoo Security Advisory GLSA 200803-15 (phpmyadmin)

The remote host is missing updates announced in advisory GLSA 200803-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200411-36 (phpmyadmin)

The remote host is missing updates announced in advisory GLSA 200411-36. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200504-30 (phpmyadmin)

The remote host is missing updates announced in advisory GLSA 200504-30. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...