Skip to content

CVE-2012-5469 Portable phpMyAdmin <= 1.3.0 - Authentication Bypass

HighCVSS 7.5 EPSS 23.7% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to wp-content/plugins/portable-phpmyadmin/wp-pma-mod.

Affected products

ProductAffected versionsFixed in
phpmyadmin/phpmyadmin = 1.0.0 No fix listed
phpmyadmin/phpmyadmin = 1.0.1 No fix listed
phpmyadmin/phpmyadmin = 1.0.2 No fix listed
phpmyadmin/phpmyadmin = 1.0.3 No fix listed
phpmyadmin/phpmyadmin = 1.0.4 No fix listed
phpmyadmin/phpmyadmin = 1.0.5 No fix listed
phpmyadmin/phpmyadmin = 1.0.6 No fix listed
phpmyadmin/phpmyadmin = 1.0.6-a No fix listed
phpmyadmin/phpmyadmin = 1.0.7 No fix listed
phpmyadmin/phpmyadmin = 1.0.8 No fix listed
phpmyadmin/phpmyadmin = 1.1 No fix listed
phpmyadmin/phpmyadmin = 1.2 No fix listed
phpmyadmin/phpmyadmin = 1.2.1 No fix listed
phpmyadmin/phpmyadmin = 1.2.2 No fix listed
phpmyadmin/phpmyadmin = 1.2.3 No fix listed
phpmyadmin/phpmyadmin = 1.2.4 No fix listed
phpmyadmin/phpmyadmin = 1.2.5 No fix listed
phpmyadmin/phpmyadmin = 1.2.6 No fix listed
phpmyadmin/phpmyadmin = 1.2.7 No fix listed
phpmyadmin/phpmyadmin = 1.2.8 No fix listed
phpmyadmin/phpmyadmin = 1.2.9 No fix listed
phpmyadmin/phpmyadmin = 1.2.9.1 No fix listed
phpmyadmin/phpmyadmin = 1.2.9.2 No fix listed
phpmyadmin/phpmyadmin = 1.2.9.3 No fix listed
phpmyadmin/phpmyadmin = 1.2.9.4-b No fix listed
Show 5 more
ProductAffected versionsFixed in
phpmyadmin/phpmyadmin = 1.2.9.4-c No fix listed
phpmyadmin/phpmyadmin = 1.2.9.5 No fix listed
phpmyadmin/phpmyadmin = 1.3 No fix listed
phpmyadmin/phpmyadmin = 1.3-alpha No fix listed
wordpress portable-phpmyadmin(WordPress) < 1.3.1 1.3.1

References