CVE-2013-3238

This Metasploit module exploits a PREG_REPLACE_EVAL vulnerability in phpMyAdmin (CVE-2013-3238) by leveraging the `replace_prefix_tbl` function to execute arbitrary PHP code. It authenticates with provided credentials, retrieves a CSRF token, and injects payload via the `from_prefix` and `to_prefix` parameters.

This is a detailed technical writeup describing multiple vulnerabilities in phpMyAdmin, including remote code execution via preg_replace() and local file inclusion. It provides root cause analysis, affected code snippets, and step-by-step exploitation instructions.

This Metasploit module exploits a PREG_REPLACE_EVAL vulnerability in phpMyAdmin (CVE-2013-3238) by leveraging the `preg_replace` function with the `/e` modifier to execute arbitrary PHP code. It authenticates, retrieves a CSRF token, and injects payload via the `replace_prefix_tbl` functionality.