CVE-2016-5734

This exploit leverages a regex null byte vulnerability in phpMyAdmin 4.3.0-4.6.2 to achieve remote code execution (RCE) by manipulating the find-and-replace functionality. It requires valid credentials and targets PHP versions 4.3.0-5.4.6 due to a regex fix in later versions.

This repository contains a functional exploit for CVE-2016-5734, a remote code execution vulnerability in phpMyAdmin 4.0.x-4.6.2. The exploit leverages a find-and-replace feature with a crafted regex to inject malicious PHP code into a database table, which is then executed.

This is a functional exploit for CVE-2016-5734, targeting a regex-based vulnerability in phpMyAdmin 4.3.0-4.6.2. It leverages a null byte injection in the find-and-replace feature to achieve remote code execution (RCE) when combined with valid credentials.

This repository contains Ansible playbooks for setting up a test environment but lacks any exploit code or technical details related to CVE-2016-5734. It appears to be a placeholder or incomplete project.

This Metasploit module exploits a preg_replace eval injection vulnerability in phpMyAdmin (CVE-2016-5734) to achieve authenticated remote code execution. It leverages improper delimiter handling in the search-and-replace functionality to inject arbitrary PHP code.