CVE-2012-5159
high · 7.5phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modification (Trojan Horse) in server_sync.php, which allows remote attackers to execute arbitrary PHP code via an eval injection attack.
7.5
CVSS
74.5%
EPSS (exploit prob.)
99th
EPSS percentile
2012-09-25
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-94
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| phpmyadmin | phpmyadmin | 3.5.2.2 |
Check a specific version with /api/v1/cve/match.
References
- http://seclists.org/oss-sec/2012/q3/562
- http://sourceforge.net/blog/phpmyadmin-back-door/
- http://www.phpmyadmin.net/home_page/security/PMASA-2012-5.php
- http://www.securityfocus.com/bid/55672
- http://seclists.org/oss-sec/2012/q3/562
- http://sourceforge.net/blog/phpmyadmin-back-door/
- http://www.phpmyadmin.net/home_page/security/PMASA-2012-5.php
- http://www.securityfocus.com/bid/55672
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2012-5159