CVE-2018-12613 Information

Description

An issue was discovered in phpMyAdmin 4.8.x before 4.8.2 in which an attacker can include (view and potentially execute) files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin and an improper test for whitelisted pages. An attacker must be authenticated except in the $cfg[‘AllowArbitraryServer’] = true\ case (where an attacker can specify any host he/she is already in control of and execute arbitrary code on phpMyAdmin) and the $cfg[‘ServerDefault’] = 0\ case (which bypasses the login requirement and runs the vulnerable code without any authentication).

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Reference

http://www.securityfocus.com/bid/104532 https://security.gentoo.org/glsa/201904-16 https://www.exploit-db.com/exploits/44924/ https://www.exploit-db.com/exploits/44928/ https://www.exploit-db.com/exploits/45020/ https://www.phpmyadmin.net/security/PMASA-2018-4/

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

8.8