Unscored severity · published Aug 19, 2013
CVE-2013-5029
phpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attackers to bypass the clickjacking protection mechanism via certain vectors related to Header.class.php
–
CVSS
2.3%
EPSS
No
On KEV
Description
phpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attackers to bypass the clickjacking protection mechanism via certain vectors related to Header.class.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Opensuse · Opensuse
12.2; 12.3 · source: NVD
PH
Phpmyadmin · Phpmyadmin
3.5.0.0; 3.5.1.0; 3.5.2.0; 3.5.2.1; 3.5.2.2; 3.5.3.0; +18 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-5029
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-5029
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00013.html
Vendor Advisory
http://secunia.com/advisories/54488
Vendor Advisory
http://www.phpmyadmin.net/home_page/security/PMASA-2013-10.php
Exploit
https://github.com/phpmyadmin/phpmyadmin/commit/240b8332db53dedc27baeec5306dabad3bdece3b
Exploit
https://github.com/phpmyadmin/phpmyadmin/commit/24d0eb55203b029f250c77d63f2900ffbe099e8b
Patch
https://github.com/phpmyadmin/phpmyadmin/commit/66fe475d4f51b1761719cb0cab360748800373f7
More from Opensuse
9.8
CVE-2016-4171
Adobe Flash Player Remote Code Execution Vulnerability
9.8
CVE-2016-4117
Adobe Flash Player Arbitrary Code Execution Vulnerability
9.8
CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability
9.8
CVE-2015-2590
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
9.8
CVE-2015-5119
Adobe Flash Player Use-After-Free Vulnerability