CVE-2012-5159

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 74.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-09-25 · updated 2026-06-16
Weakness: CWE-94

Description

phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modification (Trojan Horse) in server_sync.php, which allows remote attackers to execute arbitrary PHP code via an eval injection attack.

Affected products

phpMyAdmin: 3.5.2.2

References

http://seclists.org/oss-sec/2012/q3/562
http://sourceforge.net/blog/phpmyadmin-back-door/
http://www.phpmyadmin.net/home_page/security/PMASA-2012-5.php
http://www.securityfocus.com/bid/55672
http://seclists.org/oss-sec/2012/q3/562
http://sourceforge.net/blog/phpmyadmin-back-door/
http://www.phpmyadmin.net/home_page/security/PMASA-2012-5.php
http://www.securityfocus.com/bid/55672

Get alerted when CVE-2012-5159 or the next vulnerability affects your stack