FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

phpMyAdmin -- clickJacking protection can be bypassed

Affected packages
phpMyAdmin < 4.0.5

Details

VuXML ID 17326fd5-fcfb-11e2-9bb9-6805ca0b3d42
Discovery 2013-08-04
Entry 2013-08-04

The phpMyAdmin development team reports:

phpMyAdmin has a number of mechanisms to avoid a clickjacking attack, however these mechanisms either work only in modern browser versions, or can be bypassed.

"We have no solution for 3.5.x, due to the proposed solution requiring JavaScript. We don't want to introduce a dependency to JavaScript in the 3.5.x family."

References

URL http://www.phpmyadmin.net/home_page/security/PMASA-2013-10.php