CVE-2008-3456

Published Aug 4, 2008 CVSS 2.0 · 6.4 Medium EPSS 2.4% KEV · Not listed
Description
phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1641-1 New phpmyadmin packages fix several issues
EUVD EUVD EUVD-2008-3442 phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 9:37 AM
Reserved
Aug 4, 2008, 12:00 AM
Status
Modified
Published
Aug 4, 2008, 7:41 PM
Modified
Jun 16, 2026, 10:55 PM