CVE-2016-6609

An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

PHPMoAdmin 1.1.2 Remote Code Execution Exploit

This Metasploit module exploits an arbitrary PHP command execution vulnerability due to a dangerous use of eval in PHPMoAdmin. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4...

PHPMoAdmin 1.1.2 Remote Code Execution

This module exploits an arbitrary PHP command execution vulnerability due to a dangerous use of eval in PHPMoAdmin. Module Options msf use exploit/multi/http/phpmoadmin/exec msf undefinedexec show actions ...actions... msf undefinedexec set ACTION msf undefinedexec show options ...show and set...

PT-2016-6985

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.16 phpMyAdmin versions 4.4.x through 4.4.15.7 phpMyAdmin versions 4.6.x through 4.6.3 Description An issue was discovered in phpMyAdmin, where a specially crafted database name could be used to run...

HiveMail 1.2.2/1.3 - 'addressbook.update.php?contactgroupid' Arbitrary PHP Command Execution

source: https://www.securityfocus.com/bid/16591/info HiveMail is prone to multiple vulnerabilities. These vulnerabilities may allow the execution of arbitrary PHP code, cross-site scripting attacks, and SQL injection. The PHP code-execution issues are the result of an input-validation error that...