Official phpMyAdmin image implanted with Backdoor

The official image of the open-source PHP management tool phpMyAdmin package was found to have been implanted with a backdoor, and the developer has issued a warning to the user.

The developer said the cdnetworks-kr-1 of one of SourceForge.net images was used to spread a backdoor embedded phpMyAdmin package in the server_sync.php file, allowing attackers to remotely execute PHP code, another file js/cross_framing_protection.js is also modified. The file was modified on July 15, August 12, 2012, but the researchers speculated that the date was forged. SourceForge believed that the intrusion occurred around July 15, September 22. The log showed that about 400 people downloaded the modified version of the software. The backup storage is located in South Korea, and the server supplier has confirmed the intrusion.