Rewterz
Rewterz Threat Alert – Spam Campaign Utilizing LokiBot For their Gain
September 18, 2019
Rewterz
Rewterz Threat Alert – Private Information on Google Calendars Publicly Exposed and Exploited
September 18, 2019

Rewterz Threat Advisory – CVE-2019-12922 – phpMyAdmin Cross Site Request Forgery Vulnerability

Severity

Medium

Analysis Summary

A Cross-Site Request Forgery in phpMyAdmin, that allows an attacker to trigger a CSRF attack against a phpMyAdmin user deleting any server in the Setup page.

Impact

Cross-Site Request Forgery

Affected Vendors

phpMyAdmin

Affected Products

phpMyAdmin 4.9.0.1

Remediation

  • Always be suspicious about links sent by unknown senders.
  • Never click on the link/attachments sent by unknown senders.