The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "</script" sequence.
References
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2008-09-30 16:13
Updated : 2024-02-04 17:33
NVD link : CVE-2008-4326
Mitre link : CVE-2008-4326
CVE.ORG link : CVE-2008-4326
JSON object : View
Products Affected
microsoft
- internet_explorer
phpmyadmin
- phpmyadmin
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')