CVE-2008-3456

N/A Unknown

Published: August 04, 2008 Modified: April 23, 2026

Description

phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html

Source: cve@mitre.org

http://secunia.com/advisories/31263

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31312

Source: cve@mitre.org

http://secunia.com/advisories/32834

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1641

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:202

Source: cve@mitre.org

http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-6

Source: cve@mitre.org

http://www.securityfocus.com/bid/30420

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2226/references

Source: cve@mitre.org

http://yehg.net/lab/pr0js/advisories/Cross-Site_Framing_inphpMyAdmin2.11.7.pdf

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/44050

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01239.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01316.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html