4.3

CVE-2013-5029

Exploit

phpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attackers to bypass the clickjacking protection mechanism via certain vectors related to Header.class.php.

Data is provided by the National Vulnerability Database (NVD)
Opensuse ≫ Opensuse Version12.2
Opensuse ≫ Opensuse Version12.3
Phpmyadmin ≫ Phpmyadmin Version3.5.0.0
Phpmyadmin ≫ Phpmyadmin Version3.5.1.0
Phpmyadmin ≫ Phpmyadmin Version3.5.2.0
Phpmyadmin ≫ Phpmyadmin Version3.5.2.1
Phpmyadmin ≫ Phpmyadmin Version3.5.2.2
Phpmyadmin ≫ Phpmyadmin Version3.5.3.0
Phpmyadmin ≫ Phpmyadmin Version3.5.4
Phpmyadmin ≫ Phpmyadmin Version3.5.5
Phpmyadmin ≫ Phpmyadmin Version3.5.6
Phpmyadmin ≫ Phpmyadmin Version3.5.7
Phpmyadmin ≫ Phpmyadmin Version3.5.7 Updaterc1
Phpmyadmin ≫ Phpmyadmin Version3.5.8
Phpmyadmin ≫ Phpmyadmin Version3.5.8 Updaterc1
Phpmyadmin ≫ Phpmyadmin Version3.5.8.1
Phpmyadmin ≫ Phpmyadmin Version3.5.8.2
Phpmyadmin ≫ Phpmyadmin Version4.0.0
Phpmyadmin ≫ Phpmyadmin Version4.0.0 Updaterc2
Phpmyadmin ≫ Phpmyadmin Version4.0.0 Updaterc3
Phpmyadmin ≫ Phpmyadmin Version4.0.1
Phpmyadmin ≫ Phpmyadmin Version4.0.2
Phpmyadmin ≫ Phpmyadmin Version4.0.3
Phpmyadmin ≫ Phpmyadmin Version4.0.4
Phpmyadmin ≫ Phpmyadmin Version4.0.4.1
Phpmyadmin ≫ Phpmyadmin Version4.0.4.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.73% 0.816
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.