CVE-2008-3456: phpMyAdmin

Medium severity, CVSS 6.4. EPSS: 2.4% chance of exploitation in the next 30 days.

phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack.

Affected products

• phpMyAdmin phpMyAdmin: up to and including 2.11.7.0; version 2.0 only; version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; …

Published 2008-08-04. Last modified 2026-06-16.