CVE-2008-4326

MEDIUM · CVSS 4.3 EPSS 1.86%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-09-30 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2008-4326

Severity

MEDIUM

CVSS

4.3

EPSS

1.86%

Original Filing — NVD Description

The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "</script" sequence.