Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-4326

The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "</script" sequence.

Published

2008-09-30T16:13:50.437

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application phpmyadmin phpmyadmin ≤ 2.11.9.1 Yes
Application phpmyadmin phpmyadmin 2.0 Yes
Application phpmyadmin phpmyadmin 2.0.0 Yes
Application phpmyadmin phpmyadmin 2.0.1 Yes
Application phpmyadmin phpmyadmin 2.0.2 Yes
Application phpmyadmin phpmyadmin 2.0.3 Yes
Application phpmyadmin phpmyadmin 2.0.4 Yes
Application phpmyadmin phpmyadmin 2.0.5 Yes
Application phpmyadmin phpmyadmin 2.1 Yes
Application phpmyadmin phpmyadmin 2.1.0 Yes
Application phpmyadmin phpmyadmin 2.1.1 Yes
Application phpmyadmin phpmyadmin 2.1.2 Yes
Application phpmyadmin phpmyadmin 2.2 Yes
Application phpmyadmin phpmyadmin 2.2.0 Yes
Application phpmyadmin phpmyadmin 2.2.0_pre1 Yes
Application phpmyadmin phpmyadmin 2.2.0_pre2 Yes
Application phpmyadmin phpmyadmin 2.2.0_rc1 Yes
Application phpmyadmin phpmyadmin 2.2.0_rc2 Yes
Application phpmyadmin phpmyadmin 2.2.0_rc3 Yes
Application phpmyadmin phpmyadmin 2.2.2 Yes
Application phpmyadmin phpmyadmin 2.2.3 Yes
Application phpmyadmin phpmyadmin 2.2.4 Yes
Application phpmyadmin phpmyadmin 2.2.5 Yes
Application phpmyadmin phpmyadmin 2.2.6 Yes
Application phpmyadmin phpmyadmin 2.2.7_pl1 Yes
Application phpmyadmin phpmyadmin 2.2_pre1 Yes
Application phpmyadmin phpmyadmin 2.2_pre2 Yes
Application phpmyadmin phpmyadmin 2.2_rc1 Yes
Application phpmyadmin phpmyadmin 2.2_rc2 Yes
Application phpmyadmin phpmyadmin 2.2_rc3 Yes
Application phpmyadmin phpmyadmin 2.3.1 Yes
Application phpmyadmin phpmyadmin 2.3.2 Yes
Application phpmyadmin phpmyadmin 2.4.0 Yes
Application phpmyadmin phpmyadmin 2.5.0 Yes
Application phpmyadmin phpmyadmin 2.5.1 Yes
Application phpmyadmin phpmyadmin 2.5.2 Yes
Application phpmyadmin phpmyadmin 2.5.2_pl1 Yes
Application phpmyadmin phpmyadmin 2.5.3 Yes
Application phpmyadmin phpmyadmin 2.5.4 Yes
Application phpmyadmin phpmyadmin 2.5.5 Yes
Application phpmyadmin phpmyadmin 2.5.5_pl1 Yes
Application phpmyadmin phpmyadmin 2.5.5_rc1 Yes
Application phpmyadmin phpmyadmin 2.5.5_rc2 Yes
Application phpmyadmin phpmyadmin 2.5.6_rc1 Yes
Application phpmyadmin phpmyadmin 2.5.6_rc2 Yes
Application phpmyadmin phpmyadmin 2.5.7 Yes
Application phpmyadmin phpmyadmin 2.5.7_pl1 Yes
Application phpmyadmin phpmyadmin 2.6.0_pl1 Yes
Application phpmyadmin phpmyadmin 2.6.0_pl2 Yes
Application phpmyadmin phpmyadmin 2.6.0_pl3 Yes
Application phpmyadmin phpmyadmin 2.6.1 Yes
Application phpmyadmin phpmyadmin 2.6.1_pl1 Yes
Application phpmyadmin phpmyadmin 2.6.1_pl3 Yes
Application phpmyadmin phpmyadmin 2.6.1_rc1 Yes
Application phpmyadmin phpmyadmin 2.6.2 Yes
Application phpmyadmin phpmyadmin 2.6.2_dev Yes
Application phpmyadmin phpmyadmin 2.6.2_pl1 Yes
Application phpmyadmin phpmyadmin 2.6.2_rc1 Yes
Application phpmyadmin phpmyadmin 2.6.3 Yes
Application phpmyadmin phpmyadmin 2.6.3_pl1 Yes
Application phpmyadmin phpmyadmin 2.6.4 Yes
Application phpmyadmin phpmyadmin 2.6.4_pl1 Yes
Application phpmyadmin phpmyadmin 2.6.4_pl2 Yes
Application phpmyadmin phpmyadmin 2.6.4_pl3 Yes
Application phpmyadmin phpmyadmin 2.6.4_pl4 Yes
Application phpmyadmin phpmyadmin 2.6.4_rc1 Yes
Application phpmyadmin phpmyadmin 2.7 Yes
Application phpmyadmin phpmyadmin 2.7.0 Yes
Application phpmyadmin phpmyadmin 2.7.0_beta1 Yes
Application phpmyadmin phpmyadmin 2.7.0_pl1 Yes
Application phpmyadmin phpmyadmin 2.7.0_pl2 Yes
Application phpmyadmin phpmyadmin 2.7.0_rc1 Yes
Application phpmyadmin phpmyadmin 2.7_pl1 Yes
Application phpmyadmin phpmyadmin 2.8.0 Yes
Application phpmyadmin phpmyadmin 2.8.0.1 Yes
Application phpmyadmin phpmyadmin 2.8.0.2 Yes
Application phpmyadmin phpmyadmin 2.8.0.3 Yes
Application phpmyadmin phpmyadmin 2.8.1 Yes
Application phpmyadmin phpmyadmin 2.8.1_dev Yes
Application phpmyadmin phpmyadmin 2.8.2 Yes
Application phpmyadmin phpmyadmin 2.8.3 Yes
Application phpmyadmin phpmyadmin 2.8.4 Yes
Application phpmyadmin phpmyadmin 2.9 Yes
Application phpmyadmin phpmyadmin 2.9.0 Yes
Application phpmyadmin phpmyadmin 2.9.0.1 Yes
Application phpmyadmin phpmyadmin 2.9.0.2 Yes
Application phpmyadmin phpmyadmin 2.9.0.3 Yes
Application phpmyadmin phpmyadmin 2.9.0_beta1 Yes
Application phpmyadmin phpmyadmin 2.9.0_dev Yes
Application phpmyadmin phpmyadmin 2.9.0_rc1 Yes
Application phpmyadmin phpmyadmin 2.9.1 Yes
Application phpmyadmin phpmyadmin 2.9.1.1 Yes
Application phpmyadmin phpmyadmin 2.9.1_rc1 Yes
Application phpmyadmin phpmyadmin 2.9.1_rc2 Yes
Application phpmyadmin phpmyadmin 2.9.2 Yes
Application phpmyadmin phpmyadmin 2.9_rc1 Yes
Application phpmyadmin phpmyadmin 2.10.0 Yes
Application phpmyadmin phpmyadmin 2.10.0.0 Yes
Application phpmyadmin phpmyadmin 2.10.0.1 Yes
Application phpmyadmin phpmyadmin 2.10.0.2 Yes
Application phpmyadmin phpmyadmin 2.10.1 Yes
Application phpmyadmin phpmyadmin 2.10.01 Yes
Application phpmyadmin phpmyadmin 2.10.1.0 Yes
Application phpmyadmin phpmyadmin 2.10.2 Yes
Application phpmyadmin phpmyadmin 2.10.2.0 Yes
Application phpmyadmin phpmyadmin 2.10.3 Yes
Application phpmyadmin phpmyadmin 2.10.3.0 Yes
Application phpmyadmin phpmyadmin 2.10.3rc1 Yes
Application phpmyadmin phpmyadmin 2.11.0 Yes
Application phpmyadmin phpmyadmin 2.11.0.0 Yes
Application phpmyadmin phpmyadmin 2.11.0beta1 Yes
Application phpmyadmin phpmyadmin 2.11.0rc1 Yes
Application phpmyadmin phpmyadmin 2.11.1 Yes
Application phpmyadmin phpmyadmin 2.11.1.0 Yes
Application phpmyadmin phpmyadmin 2.11.1.1 Yes
Application phpmyadmin phpmyadmin 2.11.1.2 Yes
Application phpmyadmin phpmyadmin 2.11.1rc1 Yes
Application phpmyadmin phpmyadmin 2.11.2 Yes
Application phpmyadmin phpmyadmin 2.11.2.0 Yes
Application phpmyadmin phpmyadmin 2.11.2.1 Yes
Application phpmyadmin phpmyadmin 2.11.2.2 Yes
Application phpmyadmin phpmyadmin 2.11.3 Yes
Application phpmyadmin phpmyadmin 2.11.3.0 Yes
Application phpmyadmin phpmyadmin 2.11.3rc1 Yes
Application phpmyadmin phpmyadmin 2.11.4 Yes
Application phpmyadmin phpmyadmin 2.11.4.0 Yes
Application phpmyadmin phpmyadmin 2.11.4rc1 Yes
Application phpmyadmin phpmyadmin 2.11.5 Yes
Application phpmyadmin phpmyadmin 2.11.5.0 Yes
Application phpmyadmin phpmyadmin 2.11.5.1 Yes
Application phpmyadmin phpmyadmin 2.11.5.2 Yes
Application phpmyadmin phpmyadmin 2.11.5rc1 Yes
Application phpmyadmin phpmyadmin 2.11.6 Yes
Application phpmyadmin phpmyadmin 2.11.6rc1 Yes
Application phpmyadmin phpmyadmin 2.11.7 Yes
Application phpmyadmin phpmyadmin 2.11.7.0 Yes
Application phpmyadmin phpmyadmin 2.11.8 Yes
Application phpmyadmin phpmyadmin 2.11.9 Yes
Application microsoft internet_explorer * No
References