EDB-25136

functional

phpMyAdmin - 'preg_replace' (Authenticated) Remote Code Execution (Metasploit)

view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2013-05-01catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2013-3238USmedium6.0Exploit
phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\x00 sequence, which is not properly handled before makin…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan