CVE

CVE-2009-1151

phpMyAdmin Remote Code Execution Vulnerability

phpMyAdmin · phpMyAdmin

Date added (CISA)

2022-03-25

Remediation due

2022-04-15

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file.