Description

phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modification (Trojan Horse) in server_sync.php, which allows remote attackers to execute arbitrary PHP code via an eval injection attack.

Remediation

References

CVE-2012-5159

Related Vulnerabilities

WordPress Plugin Random Banner Cross-Site Scripting (1.1.2.1)

WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Security Bypass (1.3.6.4)

Internet Information Services Other Vulnerability (CVE-2000-0770)

WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Multiple Vulnerabilities (3.7.0)

XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29519)

Severity

High

Classification

CVE-2012-5159 CWE-94

Tags

Missing Update Known Vulnerabilities