CVE ID:	CVE-2008-3456
Description:	phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack.
Test IDs:	1.3.6.1.4.1.25623.1.0.61644
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3456 BugTraq ID: 30420 http://www.securityfocus.com/bid/30420 Debian Security Information: DSA-1641 (Google Search) http://www.debian.org/security/2008/dsa-1641 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01239.html https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01316.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:202 http://yehg.net/lab/pr0js/advisories/Cross-Site_Framing_inphpMyAdmin2.11.7.pdf http://secunia.com/advisories/31263 http://secunia.com/advisories/31312 http://secunia.com/advisories/32834 SuSE Security Announcement: SUSE-SR:2008:026 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html http://www.vupen.com/english/advisories/2008/2226/references XForce ISS Database: phpmyadmin-multiple-weak-security(44050) https://exchange.xforce.ibmcloud.com/vulnerabilities/44050