VULNERABILITY INTELLIGENCE
CVE-2008-3456
CVSS score6.4 MEDIUM
EPSS probability2.39%
CISA KEVNot currently listed
Published2008-08-04
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:P
Description
phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack.
Weakness classification
- CWE-59: Improper Link Resolution Before File Access ('Link Following')