CVE-2012-5469

The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to wp-content/plugins/portable-phpmyadmin/wp-pma-mod.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2012-12-20

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Phpmyadmin (Phpmyadmin)

References

• http://archives.neohapsis.com/archives/bugtraq/2012-12/0092.html
• http://wordpress.org/extend/plugins/portable-phpmyadmin/changelog/