CVE-2013-1937: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in tblgisvisualization.php in phpMyAdmin 3.5.x before 3.5.8 might allow remote attackers to inject arbitrary web script or HTML via the 1 visualizationSettingswidth or 2 visualizationSettingsheight parameter. NOTE: a third party reports that this ...

phpMyAdmin 3.5.7 Cross Site Scripting Vulnerability

phpMyAdmin version 3.5.7 suffers from a reflective cross site scripting vulnerability. Reflected XSS in phpMyAdmin 3.5.7 ==================================================== Author: Janek Vind "waraxe" Date: 09. April 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-102.html...

phpMyAdmin 3.5.7 Cross Site Scripting

waraxe-2013-SA102 - Reflected XSS in phpMyAdmin 3.5.7 =============================================================================== Author: Janek Vind "waraxe" Date: 09. April 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-102.html Description of vulnerable software: phpMyAdmi...

phpMyAdmin - tbl_gis_visualization.php Multiple Cross-Site Scripting Vulnerabilities

phpMyAdmin - tblgisvisualization.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/58962/info phpMyAdmin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage thes...

phpMyAdmin - 'tbl_gis_visualization.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58962/info phpMyAdmin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

Portable phpMyAdmin Plugin for WordPress 'wp-pma-mod' Authentication Bypass

The Portable phpMyAdmin Plugin for WordPress installed on the remote host is affected by an authentication bypass vulnerability because the /wp-pma-mod/ path fails to properly authorize users. his may allow an attacker to bypass access restrictions and gain access to the administrative console to...

ShopEx 同IP下站点 PHPMYADMIN 弱口令

简要描述： ShopEx 同站点IP的站phpmyadmin弱口令 如果被长期蹲点可能会导致ShopEx 被撸！ 详细说明： 今天无聊扫了下ShopEx 看看有没什么洞 然后发现 存在DEDE的后台 用尽各种网上的EXP无果 直接打 phpmyadmin撸进 各种密码组合弱口令尝试无果 灵光一闪 用该站的域名进去了去掉www..com 漏洞证明： phpmyadmin后台 dede后台 一句话...

Phpmyadmin Backdoor RCE

PhpMyAdmin Backdoor Arbitrary Command Execution Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

portable-phpMyAdmin（WordPress plugin authentication bypass-vulnerability warning-the black bar safety net

Part1. Description portable-phpMyAdmin is Wordpress a plug-in, direct access to plug-ins when there are no validation Wordpress session and permissions. Since this plugin has quite a lot of management functions, without a custom over the portable-phpMyAdmin plugin provides a full phpMyAdmin conso...

CVE-2012-5469

The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to wp-content/plugins/portable-phpmyadmin/wp-pma-mod...

Authentication flaw

The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to wp-content/plugins/portable-phpmyadmin/wp-pma-mod...

CVE-2012-5469

The Portable phpMyAdmin plugin for WordPress (versions before 1.3.1 ) is vulnerable to an authentication bypass because the /wp-pma-mod/ path fails to verify an existing WordPress session or permissions. Remote attackers can gain full access to the phpMyAdmin console by making a direct request to...

CVE-2012-5469

The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to wp-content/plugins/portable-phpmyadmin/wp-pma-mod...

CVE-2012-5469: Undefined Security Weakness

The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to wp-content/plugins/portable-phpmyadmin/wp-pma-mod...

'portable-phpMyAdmin (WordPress Plugin)' Authentication Bypass (CVE-2012-5469)

I. DESCRIPTION --------------------------------------- portable-phpMyAdmin doesn't verify an existing WordPress session privileged or not when accessing the plugin file path directly. Because of how this plugin works, a default installation will provide a full phpMyAdmin console with the privileg...

WordPress Portable phpMyAdmin Plugin 'wp-pma-mod' Security Bypass Vulnerability

WordPress Portable phpMyAdmin Plugin is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Wordpress Plugin Portable phpMyAdmin Authentication Bypass

Exploit for php platform in category web applications 'portable-phpMyAdmin WordPress Plugin' Authentication Bypass CVE-2012-5469 Mark Stanislav - email protected I. DESCRIPTION --------------------------------------- portable-phpMyAdmin doesn't verify an existing WordPress session privileged or n...

WordPress Plugin Portable phpMyAdmin - Authentication Bypass

'portable-phpMyAdmin WordPress Plugin' Authentication Bypass CVE-2012-5469 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- portable-phpMyAdmin doesn't verify an existing WordPress session privileged or not when accessing the plugin file path...

phpmyadmin 2.11.4 universal password vulnerability-vulnerability warning-the black bar safety net

phpmyadmin 2.11.4 phpmyadmin 2.11.3 Both versions have this vulnerability I went to test it really can be. You can try Only need to enter the account password does not need to input Use the code as follows: ‘localhost’@'@”...

WordPress Portable phpMyAdmin Plugin - Authentication Bypass

Portable phpMyAdmin plugins is prone to authentication bypass vulnerability. It allows an attacker to gain sensitive information. Solution Upgrade to version 1.3.1...