.. / CVE-2022-23808

Exploit for phpMyAdmin < 5.1.2 - Cross-Site Scripting (CVE-2022-23808)

Description:

An issue was discovered in phpMyAdmin 5.1 before 5.1.2 that could allow an attacker to inject malicious code into aspects of the setup script, which can allow cross-site or HTML injection.

Nuclei Template

View the template here CVE-2022-23808.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-23808.yaml
Copy

References:

https://github.com/dipakpanchal456/CVE-2022-23808
https://infosecwriteups.com/exploit-cve-2022-23808-85041c6e5b97
https://nvd.nist.gov/vuln/detail/CVE-2022-23808
https://mp.weixin.qq.com/s/c2kwxwVUn1ym7oqv9Uio_A
https://www.phpmyadmin.net/security/PMASA-2022-2/