PT-2012-5809 · Phpmyadmin · Phpmyadmin

Published 2012-09-25 · Updated 2013-01-26 · CVE-2012-5159

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpMyAdmin version 3.5.2.2

Description The issue allows remote attackers to execute arbitrary PHP code via an eval injection attack due to an externally introduced modification in the server sync.php file.

Recommendations For phpMyAdmin version 3.5.2.2, consider removing or replacing the modified server sync.php file to prevent eval injection attacks. As a temporary workaround, restrict access to the server sync.php file until a clean version can be restored.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2012-5159

Affected Products

Phpmyadmin

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/phpmyadmin_3522_backdoor.rb · Exploit
• 🔥 https://exploit-db.com/exploits/21834 · Exploit
• http://phpmyadmin.net/home_page/security/PMASA-2012-5.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-5159 · Security Note
• http://seclists.org/oss-sec/2012/q3/562 · Note
• http://sourceforge.net/blog/phpmyadmin-back-door · Note
• http://securityfocus.com/bid/55672 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5159 · Note