CVEvulnerability

CVE-2008-3456

6.4 MEDIUM Published 2008-08-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-08-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
Weaknesses
CWE-59

Description

phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack.

Affected configurations

• phpmyadmin phpmyadmin (<= 2.11.7.0) • phpmyadmin phpmyadmin 2.0 • phpmyadmin phpmyadmin 2.0.0 • phpmyadmin phpmyadmin 2.0.1 • phpmyadmin phpmyadmin 2.0.2 • phpmyadmin phpmyadmin 2.0.3 • phpmyadmin phpmyadmin 2.0.4 • phpmyadmin phpmyadmin 2.0.5 • phpmyadmin phpmyadmin 2.1 • phpmyadmin phpmyadmin 2.1.0 • phpmyadmin phpmyadmin 2.1.1 • phpmyadmin phpmyadmin 2.1.2 • phpmyadmin phpmyadmin 2.10.0 • phpmyadmin phpmyadmin 2.10.0.0 • phpmyadmin phpmyadmin 2.10.0.1 • phpmyadmin phpmyadmin 2.10.0.2 • phpmyadmin phpmyadmin 2.10.1 • phpmyadmin phpmyadmin 2.10.01 • phpmyadmin phpmyadmin 2.10.1.0 • phpmyadmin phpmyadmin 2.10.2 • phpmyadmin phpmyadmin 2.10.2.0 • phpmyadmin phpmyadmin 2.10.3 • phpmyadmin phpmyadmin 2.10.3.0 • phpmyadmin phpmyadmin 2.11.0 • phpmyadmin phpmyadmin 2.11.0.0 • phpmyadmin phpmyadmin 2.11.1 • phpmyadmin phpmyadmin 2.11.1.0 • phpmyadmin phpmyadmin 2.11.1.1 • phpmyadmin phpmyadmin 2.11.1.2 • phpmyadmin phpmyadmin 2.11.2 • phpmyadmin phpmyadmin 2.11.2.0 • phpmyadmin phpmyadmin 2.11.2.1 • phpmyadmin phpmyadmin 2.11.2.2 • phpmyadmin phpmyadmin 2.11.3 • phpmyadmin phpmyadmin 2.11.3.0 • phpmyadmin phpmyadmin 2.11.4 • phpmyadmin phpmyadmin 2.11.4.0 • phpmyadmin phpmyadmin 2.11.5 • phpmyadmin phpmyadmin 2.11.5.0 • phpmyadmin phpmyadmin 2.11.5.1 • phpmyadmin phpmyadmin 2.11.5.2 • phpmyadmin phpmyadmin 2.11.6

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References