Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2008-4326HistorySep 30, 2008 - 4:13 p.m.
CVE-2008-4326
2008-09-3016:13:50
Debian Security Bug Tracker
security-tracker.debian.org
20
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.004
Percentile
74.3%
The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a “</script” sequence.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | phpmyadmin | < 4:2.11.8.1-3 | phpmyadmin_4:2.11.8.1-3_all.deb |
| Debian | 11 | all | phpmyadmin | < 4:2.11.8.1-3 | phpmyadmin_4:2.11.8.1-3_all.deb |
| Debian | 999 | all | phpmyadmin | < 4:2.11.8.1-3 | phpmyadmin_4:2.11.8.1-3_all.deb |
| Debian | 13 | all | phpmyadmin | < 4:2.11.8.1-3 | phpmyadmin_4:2.11.8.1-3_all.deb |
Related
redhatcve
redhatcve
CVE-2008-4326
2019-10-04 20:33:32
openvas
openvas
FreeBSD Ports: phpMyAdmin
2008-09-24 00:00:00
Debian Security Advisory DSA 1675-1 (phpmyadmin)
2008-12-03 00:00:00
FreeBSD Ports: phpMyAdmin
2008-09-24 00:00:00
cve
cve
CVE-2008-4326
2008-09-30 16:13:50
nvd
nvd
CVE-2008-4326
2008-09-30 16:13:50
cvelist
cvelist
CVE-2008-4326
2008-09-30 16:00:00
nessus
nessus
Debian DSA-1675-1 : phpmyadmin - insufficient input sanitising
2008-12-03 00:00:00
openSUSE Security Update : phpMyAdmin (phpMyAdmin-442)
2009-07-21 00:00:00
openSUSE 10 Security Update : phpMyAdmin (phpMyAdmin-5935)
2009-01-22 00:00:00
jvn
jvn
JVN#54824688 phpMyAdmin cross-site scripting vulnerability
2008-09-26 00:00:00
debian
debian
[SECURITY] [DSA 1675-1] New phpmyadmin packages fix cross site scripting
2008-11-30 12:53:28
prion
prion
Cross site scripting
2008-09-30 16:13:00
phpmyadmin
phpmyadmin
XSS for Microsoft Internet Explorer on several places
2008-09-23 00:00:00
ubuntucve
ubuntucve
CVE-2008-4326
2008-09-30 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.004
Percentile
74.3%
Related for DEBIANCVE:CVE-2008-4326