Description
phpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attackers to bypass the clickjacking protection mechanism via certain vectors related to Header.class.php.
Remediation
References
Related Vulnerabilities
GlassFish Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3239)
PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5279)
Zikula Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-4729)
WordPress Plugin FireStats 'firestats-wordpress.php' Remote File Include (1.6.1)
WordPress Plugin Alert Before Your Post Cross-Site Scripting (0.1.1)