phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:49
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - | |
| References | () http://secunia.com/advisories/31263 - Vendor Advisory | |
| References | () http://secunia.com/advisories/31312 - | |
| References | () http://secunia.com/advisories/32834 - | |
| References | () http://www.debian.org/security/2008/dsa-1641 - | |
| References | () http://www.mandriva.com/security/advisories?name=MDVSA-2008:202 - | |
| References | () http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-6 - | |
| References | () http://www.securityfocus.com/bid/30420 - | |
| References | () http://www.vupen.com/english/advisories/2008/2226/references - | |
| References | () http://yehg.net/lab/pr0js/advisories/Cross-Site_Framing_inphpMyAdmin2.11.7.pdf - Exploit | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/44050 - | |
| References | () https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01239.html - | |
| References | () https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01316.html - |
Information
Published : 2008-08-04 19:41
Updated : 2024-11-21 00:49
NVD link : CVE-2008-3456
Mitre link : CVE-2008-3456
CVE.ORG link : CVE-2008-3456
JSON object : View
Products Affected
phpmyadmin
- phpmyadmin
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')