CVE-2008-3456 Other in n/a
Remote attackers can conduct spoofing or phishing via cross-site framing due to insufficient frame protection in phpMyAdmin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2008-3456?
CVE-2008-3456 is a medium-severity vulnerability in Phpmyadmin Phpmyadmin, published on 4 Aug 2008. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack.
Weakness: CWE-59
Which versions are affected by CVE-2008-3456?
It affects 1 product.
Products include Phpmyadmin Phpmyadmin.
How do I fix CVE-2008-3456?
Upgrade to a fixed version.
Is CVE-2008-3456 being exploited?
There is no known exploitation of CVE-2008-3456 in the wild and no public exploit code.
Other vulnerabilities in Phpmyadmin Phpmyadmin
Sources
Also known as DEBIAN-CVE-2008-3456, GHSA-xqqq-qrvp-j2jg.