4.3
CVE-2008-4326
- EPSS 1.87%
- Veröffentlicht 30.09.2008 16:13:50
- Zuletzt bearbeitet 16.06.2026 22:57:36
- Erkennungen
LoginThe PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "</script" sequence.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpmyadmin ≫ Phpmyadmin Version <= 2.11.9.1
Phpmyadmin ≫ Phpmyadmin Version 2.0
Phpmyadmin ≫ Phpmyadmin Version 2.0.0
Phpmyadmin ≫ Phpmyadmin Version 2.0.1
Phpmyadmin ≫ Phpmyadmin Version 2.0.2
Phpmyadmin ≫ Phpmyadmin Version 2.0.3
Phpmyadmin ≫ Phpmyadmin Version 2.0.4
Phpmyadmin ≫ Phpmyadmin Version 2.0.5
Phpmyadmin ≫ Phpmyadmin Version 2.1
Phpmyadmin ≫ Phpmyadmin Version 2.1.0
Phpmyadmin ≫ Phpmyadmin Version 2.1.1
Phpmyadmin ≫ Phpmyadmin Version 2.1.2
Phpmyadmin ≫ Phpmyadmin Version 2.2
Phpmyadmin ≫ Phpmyadmin Version 2.2.0
Phpmyadmin ≫ Phpmyadmin Version 2.2.0_pre1
Phpmyadmin ≫ Phpmyadmin Version 2.2.0_pre2
Phpmyadmin ≫ Phpmyadmin Version 2.2.0_rc1
Phpmyadmin ≫ Phpmyadmin Version 2.2.0_rc2
Phpmyadmin ≫ Phpmyadmin Version 2.2.0_rc3
Phpmyadmin ≫ Phpmyadmin Version 2.2.2
Phpmyadmin ≫ Phpmyadmin Version 2.2.3
Phpmyadmin ≫ Phpmyadmin Version 2.2.4
Phpmyadmin ≫ Phpmyadmin Version 2.2.5
Phpmyadmin ≫ Phpmyadmin Version 2.2.6
Phpmyadmin ≫ Phpmyadmin Version 2.2.7_pl1
Phpmyadmin ≫ Phpmyadmin Version 2.2_pre1
Phpmyadmin ≫ Phpmyadmin Version 2.2_pre2
Phpmyadmin ≫ Phpmyadmin Version 2.2_rc1
Phpmyadmin ≫ Phpmyadmin Version 2.2_rc2
Phpmyadmin ≫ Phpmyadmin Version 2.2_rc3
Phpmyadmin ≫ Phpmyadmin Version 2.3.1
Phpmyadmin ≫ Phpmyadmin Version 2.3.2
Phpmyadmin ≫ Phpmyadmin Version 2.4.0
Phpmyadmin ≫ Phpmyadmin Version 2.5.0
Phpmyadmin ≫ Phpmyadmin Version 2.5.1
Phpmyadmin ≫ Phpmyadmin Version 2.5.2
Phpmyadmin ≫ Phpmyadmin Version 2.5.2_pl1
Phpmyadmin ≫ Phpmyadmin Version 2.5.3
Phpmyadmin ≫ Phpmyadmin Version 2.5.4
Phpmyadmin ≫ Phpmyadmin Version 2.5.5
Phpmyadmin ≫ Phpmyadmin Version 2.5.5_pl1
Phpmyadmin ≫ Phpmyadmin Version 2.5.5_rc1
Phpmyadmin ≫ Phpmyadmin Version 2.5.5_rc2
Phpmyadmin ≫ Phpmyadmin Version 2.5.6_rc1
Phpmyadmin ≫ Phpmyadmin Version 2.5.6_rc2
Phpmyadmin ≫ Phpmyadmin Version 2.5.7
Phpmyadmin ≫ Phpmyadmin Version 2.5.7_pl1
Phpmyadmin ≫ Phpmyadmin Version 2.6.0_pl1
Phpmyadmin ≫ Phpmyadmin Version 2.6.0_pl2
Phpmyadmin ≫ Phpmyadmin Version 2.6.0_pl3
Phpmyadmin ≫ Phpmyadmin Version 2.6.1
Phpmyadmin ≫ Phpmyadmin Version 2.6.1_pl1
Phpmyadmin ≫ Phpmyadmin Version 2.6.1_pl3
Phpmyadmin ≫ Phpmyadmin Version 2.6.1_rc1
Phpmyadmin ≫ Phpmyadmin Version 2.6.2
Phpmyadmin ≫ Phpmyadmin Version 2.6.2_dev
Phpmyadmin ≫ Phpmyadmin Version 2.6.2_pl1
Phpmyadmin ≫ Phpmyadmin Version 2.6.2_rc1
Phpmyadmin ≫ Phpmyadmin Version 2.6.3
Phpmyadmin ≫ Phpmyadmin Version 2.6.3_pl1
Phpmyadmin ≫ Phpmyadmin Version 2.6.4
Phpmyadmin ≫ Phpmyadmin Version 2.6.4_pl1
Phpmyadmin ≫ Phpmyadmin Version 2.6.4_pl2
Phpmyadmin ≫ Phpmyadmin Version 2.6.4_pl3
Phpmyadmin ≫ Phpmyadmin Version 2.6.4_pl4
Phpmyadmin ≫ Phpmyadmin Version 2.6.4_rc1
Phpmyadmin ≫ Phpmyadmin Version 2.7
Phpmyadmin ≫ Phpmyadmin Version 2.7.0
Phpmyadmin ≫ Phpmyadmin Version 2.7.0_beta1
Phpmyadmin ≫ Phpmyadmin Version 2.7.0_pl1
Phpmyadmin ≫ Phpmyadmin Version 2.7.0_pl2
Phpmyadmin ≫ Phpmyadmin Version 2.7.0_rc1
Phpmyadmin ≫ Phpmyadmin Version 2.7_pl1
Phpmyadmin ≫ Phpmyadmin Version 2.8.0
Phpmyadmin ≫ Phpmyadmin Version 2.8.0.1
Phpmyadmin ≫ Phpmyadmin Version 2.8.0.2
Phpmyadmin ≫ Phpmyadmin Version 2.8.0.3
Phpmyadmin ≫ Phpmyadmin Version 2.8.1
Phpmyadmin ≫ Phpmyadmin Version 2.8.1_dev
Phpmyadmin ≫ Phpmyadmin Version 2.8.2
Phpmyadmin ≫ Phpmyadmin Version 2.8.3
Phpmyadmin ≫ Phpmyadmin Version 2.8.4
Phpmyadmin ≫ Phpmyadmin Version 2.9
Phpmyadmin ≫ Phpmyadmin Version 2.9.0
Phpmyadmin ≫ Phpmyadmin Version 2.9.0.1
Phpmyadmin ≫ Phpmyadmin Version 2.9.0.2
Phpmyadmin ≫ Phpmyadmin Version 2.9.0.3
Phpmyadmin ≫ Phpmyadmin Version 2.9.0_beta1
Phpmyadmin ≫ Phpmyadmin Version 2.9.0_dev
Phpmyadmin ≫ Phpmyadmin Version 2.9.0_rc1
Phpmyadmin ≫ Phpmyadmin Version 2.9.1
Phpmyadmin ≫ Phpmyadmin Version 2.9.1.1
Phpmyadmin ≫ Phpmyadmin Version 2.9.1_rc1
Phpmyadmin ≫ Phpmyadmin Version 2.9.1_rc2
Phpmyadmin ≫ Phpmyadmin Version 2.9.2
Phpmyadmin ≫ Phpmyadmin Version 2.9_rc1
Phpmyadmin ≫ Phpmyadmin Version 2.10.0
Phpmyadmin ≫ Phpmyadmin Version 2.10.0.0
Phpmyadmin ≫ Phpmyadmin Version 2.10.0.1
Phpmyadmin ≫ Phpmyadmin Version 2.10.0.2
Phpmyadmin ≫ Phpmyadmin Version 2.10.1
Phpmyadmin ≫ Phpmyadmin Version 2.10.01
Phpmyadmin ≫ Phpmyadmin Version 2.10.1.0
Phpmyadmin ≫ Phpmyadmin Version 2.10.2
Phpmyadmin ≫ Phpmyadmin Version 2.10.2.0
Phpmyadmin ≫ Phpmyadmin Version 2.10.3
Phpmyadmin ≫ Phpmyadmin Version 2.10.3.0
Phpmyadmin ≫ Phpmyadmin Version 2.10.3rc1
Phpmyadmin ≫ Phpmyadmin Version 2.11.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.0.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.0beta1
Phpmyadmin ≫ Phpmyadmin Version 2.11.0rc1
Phpmyadmin ≫ Phpmyadmin Version 2.11.1
Phpmyadmin ≫ Phpmyadmin Version 2.11.1.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.1.1
Phpmyadmin ≫ Phpmyadmin Version 2.11.1.2
Phpmyadmin ≫ Phpmyadmin Version 2.11.1rc1
Phpmyadmin ≫ Phpmyadmin Version 2.11.2
Phpmyadmin ≫ Phpmyadmin Version 2.11.2.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.2.1
Phpmyadmin ≫ Phpmyadmin Version 2.11.2.2
Phpmyadmin ≫ Phpmyadmin Version 2.11.3
Phpmyadmin ≫ Phpmyadmin Version 2.11.3.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.3rc1
Phpmyadmin ≫ Phpmyadmin Version 2.11.4
Phpmyadmin ≫ Phpmyadmin Version 2.11.4.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.4rc1
Phpmyadmin ≫ Phpmyadmin Version 2.11.5
Phpmyadmin ≫ Phpmyadmin Version 2.11.5.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.5.1
Phpmyadmin ≫ Phpmyadmin Version 2.11.5.2
Phpmyadmin ≫ Phpmyadmin Version 2.11.5rc1
Phpmyadmin ≫ Phpmyadmin Version 2.11.6
Phpmyadmin ≫ Phpmyadmin Version 2.11.6rc1
Phpmyadmin ≫ Phpmyadmin Version 2.11.7
Phpmyadmin ≫ Phpmyadmin Version 2.11.7.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.8
Phpmyadmin ≫ Phpmyadmin Version 2.11.9
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.87% | 0.765 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html
http://secunia.com/advisories/33822
http://jvn.jp/en/jp/JVN54824688/index.html
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000061.html
http://osvdb.org/48511
http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_2_11_9/phpMyAdmin/libraries/js_escape.lib.php?r1=11514&r2=11603&pathrev=11603
http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/libraries/js_escape.lib.php?view=log&pathrev=11603
http://secunia.com/advisories/31974
http://secunia.com/advisories/31992
http://secunia.com/advisories/32954
http://typo3.org/teams/security/security-bulletins/typo3-20080924-1/
http://www.debian.org/security/2008/dsa-1675
http://www.openwall.com/lists/oss-security/2008/09/22/2
http://www.phpmyadmin.net/home_page/downloads.php?relnotes=1
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-8
http://www.vupen.com/english/advisories/2008/2657