CVE-2008-3456
Summary
| CVE | CVE-2008-3456 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-08-04 19:41:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:N/C:N/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Phpmyadmin | Phpmyadmin | 2.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.0.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.0.1 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.0.2 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.0.3 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.0.4 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.0.5 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.1 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.1.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.1.1 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.1.2 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.10.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.10.0.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.10.0.1 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.10.0.2 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.10.01 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.10.1 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.10.1.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.10.2 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.10.2.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.10.3 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.10.3.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.0.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.1 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.1.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.1.1 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.1.2 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.2 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.2.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.2.1 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.2.2 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.3 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.3.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.4 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.4.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.5 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.5.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.5.1 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.5.2 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 2.11.6 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| phpMyAdmin Cross-Site Scripting and Spoofing - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| phpMyAdmin Multiple Cross-Site Scripting Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| SUSE update for phpMyAdmin and lighttpd - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| [SECURITY] Fedora 9 Update: phpMyAdmin-2.11.8.1-1.fc9 | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| phpMyAdmin - Security - PMASA-2008-6 | af854a3a-2127-422b-91ae-364da2661108 | www.phpmyadmin.net | |
| Debian -- Security Information -- DSA-1641-1 phpmyadmin | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| yehg.net/lab/pr0js/advisories/Cross-Site_Framing_inphpMyAdmin2.11.7.pdf | af854a3a-2127-422b-91ae-364da2661108 | yehg.net | Exploit |
| [SECURITY] Fedora 8 Update: phpMyAdmin-2.11.8.1-1.fc8 | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| Security Advisories | Mandriva Linux | af854a3a-2127-422b-91ae-364da2661108 | www.mandriva.com | |
| Fedora update for phpMyAdmin - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Webmail- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| [security-announce] SUSE Security Summary Report: SUSE-SR:2008:026 | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.