Description
The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "</script" sequence.
Remediation
References
Related Vulnerabilities
MySQL CVE-2012-0484 Vulnerability (CVE-2012-0484)
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-5342)
WordPress Plugin One User Avatar-User Profile Picture Multiple Vulnerabilities (2.3.6)
MySQL CVE-2024-20985 Vulnerability (CVE-2024-20985)
WordPress Plugin Disqus Comment System Multiple Vulnerabilities (2.75)