← Database

CVE-2008-4326

MEDIUM CVSS: 4.3 Published: 2008-09-30 Modified: 2026-06-16

Description

The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "

Affected Platforms

Microsoft Internet ExplorerPhpmyadmin Phpmyadmin

Weakness Type

CWE-79

References