CVE-2013-5029: Input Validation
Published Aug 19, 2013
·Updated
phpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attackers to bypass the clickjacking protection mechanism via certain vectors related to Header.class.php.
Affected Software
26 affected components
openSUSE openSUSE=12.2
openSUSE openSUSE=12.3
phpMyAdmin phpMyAdmin=3.5.0.0
phpMyAdmin phpMyAdmin=3.5.1.0
phpMyAdmin phpMyAdmin=3.5.2.0
phpMyAdmin phpMyAdmin=3.5.2.1
phpMyAdmin phpMyAdmin=3.5.2.2
phpMyAdmin phpMyAdmin=3.5.3.0
phpMyAdmin phpMyAdmin=3.5.4
phpMyAdmin phpMyAdmin=3.5.5
phpMyAdmin phpMyAdmin=3.5.6
phpMyAdmin phpMyAdmin=3.5.7
phpMyAdmin phpMyAdmin=3.5.7-rc1
phpMyAdmin phpMyAdmin=3.5.8
phpMyAdmin phpMyAdmin=3.5.8-rc1
phpMyAdmin phpMyAdmin=3.5.8.1
phpMyAdmin phpMyAdmin=3.5.8.2
phpMyAdmin phpMyAdmin=4.0.0
phpMyAdmin phpMyAdmin=4.0.0-rc2
phpMyAdmin phpMyAdmin=4.0.0-rc3
phpMyAdmin phpMyAdmin=4.0.1
phpMyAdmin phpMyAdmin=4.0.2
phpMyAdmin phpMyAdmin=4.0.3
phpMyAdmin phpMyAdmin=4.0.4
phpMyAdmin phpMyAdmin=4.0.4.1
phpMyAdmin phpMyAdmin=4.0.4.2
Remediation
Event History
Aug 19, 2013
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5029?
CVE-2013-5029 has been classified as a medium severity vulnerability due to its potential to allow clickjacking attacks.
2
How do I fix CVE-2013-5029?
To fix CVE-2013-5029, you should upgrade phpMyAdmin to version 4.0.5 or later.
3
Which versions of phpMyAdmin are affected by CVE-2013-5029?
CVE-2013-5029 affects phpMyAdmin versions 3.5.x and 4.0.x prior to 4.0.5.
4
Can CVE-2013-5029 be exploited remotely?
Yes, CVE-2013-5029 can be exploited remotely by attackers to bypass clickjacking protection.
5
What component of phpMyAdmin is vulnerable in CVE-2013-5029?
CVE-2013-5029 involves a vulnerability in the Header.class.php component of phpMyAdmin.