PhpMyAdmin vulnerability exploitation summary With Metasploit

I. Affected Versions: 3.5.x <3.5.8.1 and 4.0.0 <4.0.0-rc3

Overview: PhpMyAdmin has the PREG_REPLACE_EVAL vulnerability.

Exploitation module: exploit/multi/http/phpmyadmin_preg_replace

CVE-2013-3238 (CVE)

 

Ii. Affected Version: phpMyAdmin v3.5.2.2

Overview: server_sync.php backdoor vulnerability in PhpMyAdmin

Exploitation module: exploit/multi/http/phpmyadmin_3522_backdoor

CVE-2012-5159 (CVE)

 

3. Affected Versions: 2.11.x <2.11.9.5 and 3.x <3.1.3.1;

Overview: Command Execution in PhpMyAdmin configuration file/config. inc. php

Exploitation module: exploit/unix/webapp/phpmyadmin_config

CVE-2009-1151 (CVE)