phpMyAdmin-CVE-2020-5504-Exploit

CVE-2020-5504 phpMyAdmin Security Assessment Tool Authorized security testing and research framework for identifying and validating CVE-2020-5504 in phpMyAdmin deployments Overview · Features · Installation · Usage · Reports · Architecture · Contributing Responsible-use notice: This project is...

CVE-2014-9219

CVE-2014-9219 CVE-2014-9219 XSS POC About The vulnerability is caused by an input validation error in the redirection feature in url.php in phpMyAdmin 4.2.x before 4.2.13.1 when processing url parameter. A remote attacker can trick the victim to follow a specially crafted link and execute arbitra...

phpmyadmin-designer-json-sqli

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · phpmyadmin-designer-json-sqli Write-up: https://abraxaslabs.tech/research/phpmyadmin-designer-json-sqli phpmyadmin-designer-json-sqli Class: SQLi Reach: Remote phpMyAdmin 5.2.3 tag RELEASE523, commit 962857e. Designer...

pocs

minervais.com.phpMyAdminRCE.sh phpMyAdmin '/scripts/setup.php' PHP Code Injection RCE POC. This was the first publicly-released exploit for CVE-2009-1151. Syntax $ ./phpMyAdminRCE.sh usage: ./phpMyAdminRCE.sh i.e.: ./phpMyAdminRCE.sh http://target.tld/phpMyAdmin/ Demo $ ./phpMyAdminRCE.sh...

CVE-2022-23808

phpMyAdmin Exploit Exploit Title : phpMyAdmin 5.1.1 - XSS Cross-site Scripting Exploit Author : Dipak Panchal @th3.d1p4k Vendor Homepage : https://www.phpmyadmin.net Software Link : https://www.phpmyadmin.net/files/5.1.1/ Affected Versions : phpMyAdmin versions of the 5.1 branch prior to 5.1.2 ar...

phpmyadmin-webauthn

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · phpmyadmin-webauthn Write-up: https://abraxaslabs.tech/research/phpmyadmin-webauthn phpmyadmin-webauthn Class: 2FA bypass Reach: Remote phpMyAdmin 5.2.3 tag RELEASE523. Default tarball. web-auth/webauthn-lib is sugges...

phpmyadmin-config-set-2fa

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · phpmyadmin-config-set-2fa Write-up: https://abraxaslabs.tech/research/phpmyadmin-config-set-2fa phpmyadmin-config-set-2fa Class: Privilege leftover / missing step-up Reach: Remote phpMyAdmin 5.2.3 RELEASE523 / 962857e...

CVE-2015-6967

CVE-2015-6967 python exploit.py --url http://xx.xx.xx.xx --username admin --password nibbles --payload phprevshell.php Cambiar $ip en linea 7 de phprevshell.php nc -lvnp 1234...

phpmyadmin-issuperuser

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · phpmyadmin-issuperuser Write-up: https://abraxaslabs.tech/research/phpmyadmin-issuperuser phpmyadmin-issuperuser Class: Privilege leftover Reach: Remote phpMyAdmin 5.2.3 RELEASE523 / 962857e - phpMyAdmin...

phpmyadmin-auth-plugin-unquoted

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · phpmyadmin-auth-plugin-unquoted Write-up: https://abraxaslabs.tech/research/phpmyadmin-auth-plugin-unquoted phpmyadmin-auth-plugin-unquoted Class: SQLi Reach: Remote phpMyAdmin 5.2.3 RELEASE523 / 962857e - phpMyAdmin...

phpMyAdmin < 5.0.3 - SQL Injection

phpMyAdmin before 4.9.6 and 5.x before 5.0.3 contains a SQL injection caused by improper processing of SQL statements in the search feature, letting attackers inject malicious SQL, exploit requires crafted search input. id: CVE-2020-26935 info: name: phpMyAdmin 5.0.3 - SQL Injection author: 0xAko...

phpMyAdmin <4.8.5 - Local File Inclusion

phpMyAdmin before 4.8.5 is susceptible to local file inclusion. When the AllowArbitraryServer configuration setting is set to true, an attacker can read, with the use of a rogue MySQL server, any file on the server that the web server's user can access. This is related to the mysql.allowlocalinfi...

phpMyAdmin < 5.1.2 - Cross-Site Scripting

An issue was discovered in phpMyAdmin 5.1 before 5.1.2 that could allow an attacker to inject malicious code into aspects of the setup script, which can allow cross-site or HTML injection. id: CVE-2022-23808 info: name: phpMyAdmin 5.1.2 - Cross-Site Scripting author: cckuailong,daffainfo severity...

phpMyAdmin 5.0.2 - CRLF Injection

phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an error page. NOTE: the vendor states "I don't see anything specifically exploitable. id: CVE-2020-11441 info: name: phpMyAdmin 5.0.2 - CRLF Injecti...

ZmEu

ZmEu CVE-2009-1151, phpMyAdmin's set.up...

CVE-2018-12613-phpMyAdmin

CVE-2018-12613-phpMyAdmin This article will share a file inclusion vulnerability in phpMyAdmin version 4.8.1, explaining from configuration to principle, and then to vulnerability reproduction. More importantly, it helps everyone understand the knowledge behind these real vulnerabilities. A basic...

PhpMyAdmin

This is an old perl scanner I found for the php my admin exploit that's from 2009. I got bored and figured I would practice perl and learn a bit about an older language and convert it to python. This is for educational purposes mostly because this exploit being well over a decade old I wouldn't...

CVE-2018-12613

CVE-2018-12613 Modified standalone exploit ported to Python 3. Tested on Python 3.7.3, phpMyAdmin 4.8.1 running on Ubuntu 16.04 Works on Linux only. Original exploit by SSD. All credits to them. Changes made 1. Added function to exit if provided phpMyAdmin username/password is correct 2. Added...

CVE-2020-5504-phpMyAdmin

CVE-2020-5504-phpMyAdmin...

5MMISSI-CVE-2017-1000499

5MMISSI-CVE-2017-1000499 PoC of CVE-2017-1000499 phpMyAdmin versions 4.7.x prior to 4.7.6.1/4.7.7 are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc...