CVE-2013-5029

phpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attackers to bypass the clickjacking protection mechanism via certain vectors related to Header.class.php.

• CWE-20

• http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00013.html
• http://secunia.com/advisories/54488Vendor Advisory
• http://www.phpmyadmin.net/home_page/security/PMASA-2013-10.phpVendor Advisory
• https://github.com/phpmyadmin/phpmyadmin/commit/240b8332db53dedc27baeec5306dabad3bdece3bExploit, Patch
• https://github.com/phpmyadmin/phpmyadmin/commit/24d0eb55203b029f250c77d63f2900ffbe099e8bExploit, Patch
• https://github.com/phpmyadmin/phpmyadmin/commit/66fe475d4f51b1761719cb0cab360748800373f7Patch
• https://github.com/phpmyadmin/phpmyadmin/commit/da4042fb6c4365dc8187765c3bf525043687c66fExploit, Patch
• http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00013.html
• http://secunia.com/advisories/54488Vendor Advisory
• http://www.phpmyadmin.net/home_page/security/PMASA-2013-10.phpVendor Advisory
• https://github.com/phpmyadmin/phpmyadmin/commit/240b8332db53dedc27baeec5306dabad3bdece3bExploit, Patch
• https://github.com/phpmyadmin/phpmyadmin/commit/24d0eb55203b029f250c77d63f2900ffbe099e8bExploit, Patch
• https://github.com/phpmyadmin/phpmyadmin/commit/66fe475d4f51b1761719cb0cab360748800373f7Patch
• https://github.com/phpmyadmin/phpmyadmin/commit/da4042fb6c4365dc8187765c3bf525043687c66fExploit, Patch

Published

Aug 19, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-5023The ActiveX controls in the HelpAsst component in NI Help Li…
• CVE-2013-5024An ActiveX control in NationalInstruments.Help2.dll in Natio…
• CVE-2013-5025An ActiveX control in exlauncher.dll in the Help subsystem i…
• CVE-2013-5026An ActiveX control in lookout650.ocx, lookout660.ocx, and lo…
• CVE-2013-5027Collabtive 1.0 has incorrect access control9.8
• CVE-2013-5028SQL injection vulnerability in IT/hardware-list.dll in Kwoks…
• CVE-2013-5030Ruckus Wireless Zoneflex 2942 devices with firmware 9.6.0.0.…
• CVE-2013-5031Unspecified vulnerability in Atmail before 6.6.4, and 7.x be…
• CVE-2013-5032Unspecified vulnerability in Atmail before 6.6.4, and 7.x be…
• CVE-2013-5033Unspecified vulnerability in Atmail before 6.6.4, and 7.x be…
• CVE-2013-5034Unspecified vulnerability in Atmail before 6.6.4, and 7.x be…
• CVE-2013-5035Multiple race conditions in HtmlCleaner before 2.6, as used …