CVE-2015-6967

CVE-2015-6967 python exploit.py --url http://xx.xx.xx.xx --username admin --password nibbles --payload phprevshell.php Cambiar $ip en linea 7 de phprevshell.php nc -lvnp 1234...

phpMyAdmin-CVE-2020-5504-Exploit

CVE-2020-5504 phpMyAdmin Herramienta de Evaluación de Seguridad Marco de investigación y pruebas de seguridad autorizadas para identificar y validar CVE-2020-5504 en implementaciones de phpMyAdmin Resumen · Características · Instalación · Uso · Informes · Arquitectura · Contribuciones Aviso de us...

CVE-2022-23808

phpMyAdmin Exploit Exploit Title : phpMyAdmin 5.1.1 - XSS Cross-site Scripting Exploit Author : Dipak Panchal @th3.d1p4k Vendor Homepage : https://www.phpmyadmin.net Software Link : https://www.phpmyadmin.net/files/5.1.1/ Affected Versions : phpMyAdmin versions of the 5.1 branch prior to 5.1.2 ar...

CVE-2018-12613

CVE-2018-12613 Local file inclusion bug due to filter bypass using %253f character. Software Affected 1. PHPMyAdmin v.4.8.0 2. PHPMyAdmin v.4.8.1 How to use This PowerShell scripts need three parameters to craft a exploit HTTP request: root@kitploit: 1. PHPMyAdmin URL endpoint 2. Cookies for an...

CVE-2018-1263-Demo

Exploit Demo This guide will help you to install vulnerable component and perform the attack related to phpMyAdmin bug mentioned in CVE-2018-1263. Description of CVE Why does the vulnerability exist How does the attack work How to install vulnerable component How to perform the attack Description...

5MMISSI-CVE-2017-1000499

5MMISSI-CVE-2017-1000499 PoC de CVE-2017-1000499 Las versiones 4.7.x de phpMyAdmin anteriores a 4.7.6.1/4.7.7 son vulnerables a una debilidad CSRF. Engañando a un usuario para que haga clic en una URL manipulada, es posible realizar operaciones dañinas en la base de datos, como eliminar registros...

PhpMyAdmin

This is an old perl scanner I found for the php my admin exploit that's from 2009. I got bored and figured I would practice perl and learn a bit about an older language and convert it to python. This is for educational purposes mostly because this exploit being well over a decade old I wouldn't...

phpMyAdmin < 5.1.2 - Cross-Site Scripting

An issue was discovered in phpMyAdmin 5.1 before 5.1.2 that could allow an attacker to inject malicious code into aspects of the setup script, which can allow cross-site or HTML injection. id: CVE-2022-23808 info: name: phpMyAdmin 5.1.2 - Cross-Site Scripting author: cckuailong,daffainfo severity...

phpMyAdmin <4.8.5 - Local File Inclusion

phpMyAdmin before 4.8.5 is susceptible to local file inclusion. When the AllowArbitraryServer configuration setting is set to true, an attacker can read, with the use of a rogue MySQL server, any file on the server that the web server's user can access. This is related to the mysql.allowlocalinfi...

phpMyAdmin < 5.0.3 - SQL Injection

phpMyAdmin before 4.9.6 and 5.x before 5.0.3 contains a SQL injection caused by improper processing of SQL statements in the search feature, letting attackers inject malicious SQL, exploit requires crafted search input. id: CVE-2020-26935 info: name: phpMyAdmin 5.0.3 - SQL Injection author: 0xAko...

PhpMyAdmin Scripts - Remote Code Execution

PhpMyAdmin Scripts 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 are susceptible to a remote code execution in setup.php that allows remote attackers to inject arbitrary PHP code into a configuration file via the save action. Combined with the ability to save files on server, this can allow...

phpMyAdmin 5.0.2 - CRLF Injection

phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an error page. NOTE: the vendor states "I don't see anything specifically exploitable. id: CVE-2020-11441 info: name: phpMyAdmin 5.0.2 - CRLF Injecti...

CVE-2018-12613-phpMyAdmin

CVE-2018-12613-phpMyAdmin Questo articolo condividerà una vulnerabilità di inclusione di file in phpMyAdmin versione 4.8.1, spiegandone la configurazione, il principio e la riproduzione della vulnerabilità. Ancora più importante, vuole far comprendere a tutti le conoscenze alla base di queste...

CVE-2018-12613

CVE-2018-12613 Exploit standalone modificato e portato a Python 3. Testato su Python 3.7.3, con phpMyAdmin 4.8.1 in esecuzione su Ubuntu 16.04. Funziona solo su Linux. Exploit originale di SSD. Tutti i crediti vanno a loro. Modifiche apportate 1. Aggiunta funzione per uscire se il nome...

phpmyadmin4.4_cve-2016-5734

В этом репозитории нет README...

CVE-2020-5504-phpMyAdmin

CVE-2020-5504-phpMyAdmin...

ZmEu

ZmEu CVE-2009-1151, der set.up von phpMyAdmin...

pocs

minervais.com.phpMyAdminRCE.sh phpMyAdmin '/scripts/setup.php' PHP Code Injection RCE POC. Dies war der erste öffentlich veröffentlichte Exploit für CVE-2009-1151. Syntax root@kitploit: $ ./phpMyAdminRCE.sh usage: ./phpMyAdminRCE.sh i.e.: ./phpMyAdminRCE.sh http://target.tld/phpMyAdmin/ Demo...

PhpMyAdmin <4.8.2 - Local File Inclusion

PhpMyAdmin before version 4.8.2 is susceptible to local file inclusion that allows an attacker to include view and potentially execute files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted...

CVE-2014-9219

CVE-2014-9219 CVE-2014-9219 POC de XSS Sobre A vulnerabilidade é causada por um erro de validação de entrada no recurso de redirecionamento em url.php no phpMyAdmin 4.2.x anterior a 4.2.13.1 ao processar o parâmetro url. Um atacante remoto pode enganar a vítima para seguir um link especialmente...