CVE-2017-1000499

This repository provides a functional proof-of-concept for CVE-2017-1000499, a CSRF vulnerability in phpMyAdmin versions 4.7.x prior to 4.7.6.1/4.7.7. It includes a Docker-based environment setup and a web-based exploit to demonstrate harmful database operations via crafted URLs.

This exploit demonstrates multiple CSRF attacks against phpMyAdmin 4.7.x, including table deletion, password modification, arbitrary file write, and data exfiltration via DNS. The PoC uses crafted URLs and hidden image tags to trigger malicious SQL queries.