Procedures involved:
PhpMyAdmin
Describe:
phpMyAdmin Remote PHP Code injection Vulnerability
With:
phpMyAdmin is a free tool that provides a WWW management interface for managing MySQL.
phpMyAdmin There is a PHP code injection problem, remote attackers can use this eval () function to execute arbitrary PHP commands.
However, this vulnerability is only useful if the $cfg[' leftframelight '] variable (config.inc.php file) is set to false.
phpMyAdmin stores multiple server configurations in ($cfg [' Servers '] [$i]) array variables, which are included in the config.inc.php file, including the host, port, user, password, authentication type, and so on, but because $cfg[' Servers ' [$i] did not initialize, allowing the remote user to increase the configuration of the server through the Get function, such as submitting the following request to increase the configuration:
http://target/phpmyadmin-2.5.7/left.php?server=4&cfg[servers][host]=202.81.x.x&cfg[servers][port]=8888 &cfg[servers][user]=alice.
While the $eval_string string in the eval () function allows PHP code execution, an attacker could increase the server configuration and submit a specially constructed table name, which could lead to the execution of the contained malicious PHP code.
Affected Systems:
PhpMyAdmin PhpMyAdmin 2.5.7
Attack Method:
No valid attack code at this stage
Solution:
Currently the manufacturer has not provided a patch or upgrade program, we recommend users of this software to follow the manufacturer's homepage to get the latest version:
Http://www.phpmyadmin.net
http://www.bkjia.com/PHPjc/629810.html www.bkjia.com true http://www.bkjia.com/PHPjc/629810.html techarticle Related programs: PhpMyAdmin description: PhpMyAdmin remote PHP Code injection Vulnerability nbsp; verbose: PhpMyAdmin is a free tool that provides a WWW management interface for managing MySQL. Phpmyadm ...
