coldbraid

CVE-2009-1151 PhpMyAdmin PhpMyAdmin

Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file.

CVSS
not scored

CWE-94

On CISA’s exploited list

phpMyAdmin Remote Code Execution Vulnerability

Added
2022-03-25
Federal patch deadline
2022-04-15
Ransomware use
not known