Lucene search
MitreCVE-2012-5469HistoryDec 20, 2012 - 12:02 p.m.
CVE-2012-5469
2012-12-2012:02:18
CWE-264
mitre
web.nvd.nist.gov
56
cve-2012-5469
portable phpmyadmin
wordpress
authentication bypass
phpmyadmin console access
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.014
Percentile
86.5%
The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to wp-content/plugins/portable-phpmyadmin/wp-pma-mod.
Affected configurations
Node
phpmyadminphpmyadminMatch1.0.0
ORphpmyadminphpmyadminMatch1.0.1
ORphpmyadminphpmyadminMatch1.0.2
ORphpmyadminphpmyadminMatch1.0.3
ORphpmyadminphpmyadminMatch1.0.4
ORphpmyadminphpmyadminMatch1.0.5
ORphpmyadminphpmyadminMatch1.0.6
ORphpmyadminphpmyadminMatch1.0.6a
ORphpmyadminphpmyadminMatch1.0.7
ORphpmyadminphpmyadminMatch1.0.8
ORphpmyadminphpmyadminMatch1.1
ORphpmyadminphpmyadminMatch1.2
ORphpmyadminphpmyadminMatch1.2.1
ORphpmyadminphpmyadminMatch1.2.2
ORphpmyadminphpmyadminMatch1.2.3
ORphpmyadminphpmyadminMatch1.2.4
ORphpmyadminphpmyadminMatch1.2.5
ORphpmyadminphpmyadminMatch1.2.6
ORphpmyadminphpmyadminMatch1.2.7
ORphpmyadminphpmyadminMatch1.2.8
ORphpmyadminphpmyadminMatch1.2.9
ORphpmyadminphpmyadminMatch1.2.9.1
ORphpmyadminphpmyadminMatch1.2.9.2
ORphpmyadminphpmyadminMatch1.2.9.3
ORphpmyadminphpmyadminMatch1.2.9.4b
ORphpmyadminphpmyadminMatch1.2.9.4c
ORphpmyadminphpmyadminMatch1.2.9.5
ORphpmyadminphpmyadminMatch1.3
ORphpmyadminphpmyadminMatch1.3alpha
wordpresswordpressMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpmyadmin | phpmyadmin | 1.0.0 | cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.0:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 1.0.1 | cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.1:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 1.0.2 | cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.2:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 1.0.3 | cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.3:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 1.0.4 | cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.4:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 1.0.5 | cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.5:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 1.0.6 | cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.6:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 1.0.6 | cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.6:a:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 1.0.7 | cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.7:*:*:*:*:*:*:* |
| phpmyadmin | phpmyadmin | 1.0.8 | cpe:2.3:a:phpmyadmin:phpmyadmin:1.0.8:*:*:*:*:*:*:* |
Related
patchstack
patchstack
WordPress Portable phpMyAdmin Plugin - Authentication Bypass
2012-12-13 00:00:00
nessus
nessus
Portable phpMyAdmin Plugin for WordPress 'wp-pma-mod' Authentication Bypass
2013-01-25 00:00:00
packetstorm
packetstorm
WordPress portable-phpMyAdmin 1.3.0 Authentication Bypass
2012-12-12 00:00:00
seebug
seebug
Portable phpMyAdmin Wordpress Plugin Authentication Bypass
2014-07-01 00:00:00
securityvulns
securityvulns
exploitdb
exploitdb
WordPress Plugin Portable phpMyAdmin - Authentication Bypass
2012-12-13 00:00:00
exploitpack
exploitpack
WordPress Plugin Portable phpMyAdmin - Authentication Bypass
2012-12-13 00:00:00
checkpoint_advisories
checkpoint_advisories
WordPress portable-phpMyAdmin Plugin Authentication Bypass (CVE-2012-5469)
2019-04-08 00:00:00
prion
prion
Authentication flaw
2012-12-20 12:02:00
zdt
zdt
Wordpress Plugin Portable phpMyAdmin Authentication Bypass
2012-12-13 00:00:00
wpvulndb
wpvulndb
portable-phpMyAdmin < 1.3.1 - Authentication Bypass
2014-08-01 00:00:00
cvelist
cvelist
CVE-2012-5469
2012-12-20 11:00:00
myhack58
myhack58
openvas
openvas
nvd
nvd
CVE-2012-5469
2012-12-20 12:02:18
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.014
Percentile
86.5%
Related for CVE-2012-5469