CVE-2012-5469

The Portable phpMyAdmin plugin for WordPress (versions before 1.3.1 ) is vulnerable to an authentication bypass because the /wp-pma-mod/ path fails to verify an existing WordPress session or permissions. Remote attackers can gain full access to the phpMyAdmin console by making a direct request to...

PT-2012-5985

Name of the Vulnerable Software and Affected Versions Portable phpMyAdmin plugin versions prior to 1.3.1 Description The issue allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to the 'wp-content/plugins/portable-phpmyadmin/wp-pma-mod'...