Exploit CVE-2022–23808

Hello cyber security enthusiast! This article is about on my recently assigned CVE of very popular database management tool. So, without any delay let’s start.

What is phpMyAdmin?

phpMyAdmin is a free and open-source administration tool for MySQL and MariaDB. As a portable web application written primarily in PHP, it has become one of the most popular MySQL administration tools, especially for web hosting services.

How to Identify?

You can identify by doing

• Directory Brute forcing (i.e. /phpMyAdmin/)
• Nmap (Ports i.e. 8081, 9090, 2086)
• Shodan (query: http.component:phpMyAdmin)
• Google Dork (Inurl:”/phpmyadmin/setup/index.php” Intitle:”phpMyAdmin”), etc.

Exploitation

GitHub - dipakpanchal05/CVE-2022-23808

Reference:

Acknowledgement: phpMyAdmin

Exploit: GitHub

CVE: CVE-2020–23808

Thank you for reading! 😊

Jay Hind, Vande Mataram 🇮🇳

Twitter: Dipak Panchal

Instagram: th3.d1p4k

🔈 🔈 Infosec Writeups is organizing its first-ever virtual conference and networking event. If you’re into Infosec, this is the coolest place to be, with 16 incredible speakers and 10+ hours of power-packed discussion sessions. Check more details and register here.

IWCon2022 - Infosec WriteUps Virtual Conference