phpMyAdmin.tbl_replace.php.Local.File.Inclusion
Description
This indicates an attack attempt against a Local File Inclusion vulnerability in phpMyAdmin.
A remote, authenticated attacker could exploit this vulnerability by sending a request with crafted SQL statements to the target server. Successful exploitation could lead to information disclosure, and in the worst case, achieve arbitrary code execution on the target server.
Affected Products
phpMyAdmin Devel Team phpMyAdmin 4.0 through 4.8.3
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Refer to the vendor supplied advisory for updates:
https://www.phpmyadmin.net/security/PMASA-2018-6
Telemetry
Coverage
IPS (Regular DB) | |
IPS (Extended DB) |
Version Updates
Date | Version | Detail |
---|---|---|
2019-04-03 | 14.585 | Sig Added |
2019-03-13 | 14.572 | Default_action:pass:drop |
2019-02-19 | 14.556 |