Cybersecurity Alerts

phpMyAdmin Remote Code Execution Vulnerability

Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-94

References

• https://nvd.nist.gov/vuln/detail/CVE-2009-1151