Lucene search
Redhat.comRH:CVE-2008-4326HistoryOct 04, 2019 - 8:33 p.m.
CVE-2008-4326
2019-10-0420:33:32
redhat.com
access.redhat.com
6
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.3
Confidence
High
EPSS
0.004
Percentile
74.3%
The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a “</script” sequence.
Related
debiancve
debiancve
CVE-2008-4326
2008-09-30 16:13:50
openvas
openvas
FreeBSD Ports: phpMyAdmin
2008-09-24 00:00:00
Debian Security Advisory DSA 1675-1 (phpmyadmin)
2008-12-03 00:00:00
FreeBSD Ports: phpMyAdmin
2008-09-24 00:00:00
cve
cve
CVE-2008-4326
2008-09-30 16:13:50
nvd
nvd
CVE-2008-4326
2008-09-30 16:13:50
cvelist
cvelist
CVE-2008-4326
2008-09-30 16:00:00
nessus
nessus
Debian DSA-1675-1 : phpmyadmin - insufficient input sanitising
2008-12-03 00:00:00
openSUSE Security Update : phpMyAdmin (phpMyAdmin-442)
2009-07-21 00:00:00
openSUSE 10 Security Update : phpMyAdmin (phpMyAdmin-5935)
2009-01-22 00:00:00
jvn
jvn
JVN#54824688 phpMyAdmin cross-site scripting vulnerability
2008-09-26 00:00:00
debian
debian
[SECURITY] [DSA 1675-1] New phpmyadmin packages fix cross site scripting
2008-11-30 12:53:28
prion
prion
Cross site scripting
2008-09-30 16:13:00
phpmyadmin
phpmyadmin
XSS for Microsoft Internet Explorer on several places
2008-09-23 00:00:00
ubuntucve
ubuntucve
CVE-2008-4326
2008-09-30 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.3
Confidence
High
EPSS
0.004
Percentile
74.3%
Related for RH:CVE-2008-4326