Intrusion PreventionphpMyAdmin.tbl_replace.php.Local.File.Inclusion
Description
This indicates an attack attempt against a Local File Inclusion vulnerability in phpMyAdmin.
A remote, authenticated attacker could exploit this vulnerability by sending a request with crafted SQL statements to the target server. Successful exploitation could lead to information disclosure, and in the worst case, achieve arbitrary code execution on the target server.
Affected Products
phpMyAdmin Devel Team phpMyAdmin 4.0 through 4.8.3
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Refer to the vendor supplied advisory for updates:
https://www.phpmyadmin.net/security/PMASA-2018-6
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-04-03 | 14.585 | Sig Added |
| 2019-03-13 | 14.572 | Default_action:pass:drop |
| 2019-02-19 | 14.556 |
| ID | 47472 |
| Created | Feb 20, 2019 |
| Updated | Sep 24, 2020 |
| Risk |
|
| CVE ID | CVE-2018-19968 |
| Exploit Prediction Score | 45.37% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | PHP_app |