Skip to main content

Questions tagged [phpmyadmin]

phpMyAdmin is a MySQL client web interface written in PHP.

Filter by
Sorted by
Tagged with
0 votes
1 answer

Server Side Request Forgery Vulnerability Question

I am working on a CTF called Internal. I know there are walkthroughs available but I am trying not to look at them for the time being and try and work through things myself. The admin page that is the ...
user2334659's user avatar
0 votes
1 answer

How do I create comparable security to PHPmyadmin?

I have a website hosted by netfirms, and phpmyadmin is part of the package. It's a very powerful general tool, but it takes a while to load and there are some very long and specific tasks I need to ...
Jonathon Philip Chambers's user avatar
3 votes
1 answer

protection from Backdoor hacks from disgruntled developer/ employee

I created a ecommerce site with a developer. He completed almost all his work but in the end we had some financial disagreements so our partnership ended in a bitter dispute. That developer threatened ...
jack's user avatar
  • 59
0 votes
3 answers

Can ModSecurity defend from Brute Force Attacks on PHPmyadmin and WordPress as well?

Can the software ModSecurity defend from Brute Force Attacks on PHPmyadmin and WordPress as well? A particular hosting company providing shared hosting told me that ModSecurity should cover ...
Arcticooling's user avatar
2 votes
1 answer

What does the URL token do in phpMyAdmin if it's not preventing CSRF?

I saw that there was a security exploit for phpMyAdmin using cross-site request forgery (CSRF). I always thought that the ?token= parameter in all phpMyAdmin URLs prevented against this, but then I ...
Goose's user avatar
  • 1,384
1 vote
1 answer

Why is phpMyAdmin & Apache connecting to random IPs?

Using phpMyAdmin and XAMPP in connection with local WordPress development. Sometimes when I open the local site http://localhost/phpmyadmin/index.php the firewall is showing connection attempts from ...
lowtechsun's user avatar
2 votes
2 answers

Does "/phpmyadmin/setup/index.php" present a security risk?

I found that in several websites, [HOSTNAME]/phpmyadmin/setup/index.php is accessible by default without authentication. However, it seems impossible to modify anything or to do security damage. Also, ...
Duke Nukem's user avatar
1 vote
1 answer

Was my phpMyAdmin hacked?

On a server of mine I have a current version of phpMyAdmin running. Unfortunately (my bad I knew I had to delete this folder for security after installation, I simply forgot... dangit) I still had the ...
Bent's user avatar
  • 225