CVE-2008-3456

Published Aug 4, 2008

Last updated a month ago

Overview

Description
phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack.
Source
cve@mitre.org
NVD status
Deferred

Risk scores

CVSS 2.0

Type
Primary
Base score
6.4
Impact score
4.9
Exploitability score
10
Vector string
AV:N/AC:L/Au:N/C:N/I:P/A:P

Weaknesses

nvd@nist.gov
CWE-59

Social media

Hype score
Not currently trending

Configurations

References

Sources include official advisories and independent security research.