PT-2012-5809 · Phpmyadmin · Phpmyadmin

Publicado 2012-09-25 · Atualizado 2013-01-26 · CVE-2012-5159

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpMyAdmin version 3.5.2.2

Description The issue allows remote attackers to execute arbitrary PHP code via an eval injection attack due to an externally introduced modification in the server sync.php file.

Recommendations For phpMyAdmin version 3.5.2.2, consider removing or replacing the modified server sync.php file to prevent eval injection attacks. As a temporary workaround, restrict access to the server sync.php file until a clean version can be restored.

Exploit

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2012-5159

Produtos afetados

Phpmyadmin

Referências · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/phpmyadmin_3522_backdoor.rb · Exploit
• 🔥 https://exploit-db.com/exploits/21834 · Exploit
• http://seclists.org/oss-sec/2012/q3/562 · Nota
• http://sourceforge.net/blog/phpmyadmin-back-door · Nota
• http://securityfocus.com/bid/55672 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5159 · Nota
• http://phpmyadmin.net/home_page/security/PMASA-2012-5.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-5159 · Nota de Segurança