CVE-2012-5159
phpMyAdmin 3.5.2.2 - Remote Code Execution via Trojaned server_sync.php
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-5159.
PoCs published by Metasploit, hdm, including Metasploit module exploits/multi/http/phpmyadmin_3522_backdoor.
AI-analyzed exploit summary This Metasploit module exploits a backdoor in phpMyAdmin 3.5.2.2 via the server_sync.php file, which was compromised through a SourceForge mirror. It sends a hex-encoded payload via POST request to execute arbitrary PHP code.
Description
phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modification (Trojan Horse) in server_sync.php, which allows remote attackers to execute arbitrary PHP code via an eval injection attack.
Exploits (2)
This Metasploit module exploits a backdoor in phpMyAdmin 3.5.2.2 via the server_sync.php file, which was compromised through a SourceForge mirror. It sends a hex-encoded payload via POST request to execute arbitrary PHP code.
This Metasploit module exploits a backdoor in phpMyAdmin 3.5.2.2 via the server_sync.php file, allowing arbitrary code execution through a compromised SourceForge mirror. The exploit sends a hex-encoded payload via POST request to trigger remote code execution.