exploit/multi/http/phpmyadmin_preg_replace

weaponized

phpMyAdmin Authenticated Remote Code Execution via preg_replace()

view exploit source metasploittype exploitpublished 2013-04-25catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2013-3238US	medium6.0	28.9% (98th)	Exploit	2013-04-26
phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\x00 sequence, which is not properly handled before makin…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.