daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

added remediation

patch-1
Dhiyaneshwaran 2023-03-17 02:11:29 +05:30 committed by GitHub
parent 1edfdc1b1e
commit 10cdec00f8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
cves/2019/CVE-2019-6799.yaml
View File

@ -4,7 +4,8 @@ info:
name: CVE-2019-6799
author: pwnhxl
severity: high
description: An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allow_local_infile PHP configuration, and the inadvertent ignoring of "options(MYSQLI_OPT_LOCAL_INFILE" calls.
description: |
An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allow_local_infile PHP configuration, and the inadvertent ignoring of "options(MYSQLI_OPT_LOCAL_INFILE" calls.
reference:
- https://paper.seebug.org/1112/#_4
- https://github.com/phpmyadmin/phpmyadmin/commit/828f740158e7bf14aa4a7473c5968d06364e03a2
@ -17,7 +18,7 @@ info:
shodan-query: title:"phpmyadmin"
hunter-query: app.name="phpMyAdmin"&&web.body="pma_servername"&&web.body="4.8.4"
fofa-query: body="pma_servername" && body="4.8.4"
tags: phpmyadmin,mysql,fileread
tags: cve,cve2019,phpmyadmin,mysql,fileread
requests:
- raw: