CVE-2012-5159 phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modification (Trojan Horse) in server_sync.php, which allow...
HighCVSS 7.5
EPSS 74.5%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modification (Trojan Horse) in server_sync.php, which allows remote attackers to execute arbitrary PHP code via an eval injection attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpmyadmin/phpmyadmin | = 3.5.2.2 | No fix listed |
References
- Debian Security Tracker CVE-2012-5159 vendor-advisory
- [oss-security] 20120925 Re: CVE Request - phpMyAdmin: PMASA-2012-5 incident mailing-list
- sourceforge.net
- www.phpmyadmin.net vendor-advisory
- 55672 vdb-entry