The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "</script" sequence.
References
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2008-09-30 09:13
Updated : 2011-03-07 19:12
NVD link : CVE-2008-4326
Mitre link : CVE-2008-4326
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
microsoft
- internet_explorer
phpmyadmin
- phpmyadmin