CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2009-03-26
phpMyAdmin setup.php Remote Static Code Injection and Remote Code Execution (RCE) Vulnerability (CVE-2009-1151)
[Affected Scope] phpMyAdmin versions 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1
[Impact] Unauthenticated remote attackers can inject arbitrary PHP code into the configuration file via the setup.php save action, leading to full system compromise
[Mitigation] Upgrade to patched versions immediately, or delete/restrict access to the setup.php script in production environments