Description
phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modification (Trojan Horse) in server_sync.php, which allows remote attackers to execute arbitrary PHP code via an eval injection attack.
Remediation
References
Related Vulnerabilities
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2014-3581)
PHP Numeric Errors Vulnerability (CVE-2014-3669)
WordPress Plugin eShop Multiple Vulnerabilities (6.3.13)
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-3557)
WordPress Plugin Lara's Google Analytics Cross-Site Scripting (2.0.4)