phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modification (Trojan Horse) in server_sync.php, which allows remote attackers to execute arbitrary PHP code via an eval injection attack.
No PoCs from references.
- https://github.com/duckstroms/Web-CTF-Cheatsheet
- https://github.com/mrhenrike/Hacking-Cheatsheet
- https://github.com/pwnosec/CTF-Cheatsheet
- https://github.com/w181496/Web-CTF-Cheatsheet