CVEs-PoC/2019/CVE-2019-12922.md

CVE-2019-12922

Description

A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.

POC

Reference

• http://packetstormsecurity.com/files/154483/phpMyAdmin-4.9.0.1-Cross-Site-Request-Forgery.html
• http://seclists.org/fulldisclosure/2019/Sep/23
• https://github.com/phpmyadmin/phpmyadmin/commit/7d21d4223bdbe0306593309132b4263d7087d13b
• https://www.exploit-db.com/exploits/47385

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Awrrays/FrameVul
• https://github.com/SRCybersecurity/ELEVATELABS_TASK3
• https://github.com/alphaSeclab/sec-daily-2019
• https://github.com/cc8700619/poc
• https://github.com/cyb3r-w0lf/nuclei-template-collection
• https://github.com/tdcoming/Vulnerability-engine