PRP: phpMyAdmin None Exposed Administration Interface

[sanjay20m]

• Identifier of the vulnerability: None

• Affected software: phpMyAdmin

• Type of vulnerability: Exposed Administration Interface

• Requires authentication: No

• Language you would use for writing the plugin: Templated plugins

• Resources:

  • https://www.phpmyadmin.net/
  • https://docs.phpmyadmin.net/en/latest/

Description:

phpMyAdmin is a widely used web-based MySQL administration interface.
In many deployments, phpMyAdmin panels are unintentionally exposed to the public internet.

An exposed phpMyAdmin interface allows attackers to attempt credential brute forcing
or exploit known phpMyAdmin vulnerabilities.

Detection approach:

The detector will send HTTP requests to common phpMyAdmin paths:

/phpmyadmin
/phpMyAdmin
/pma

If the response contains identifiable phpMyAdmin fingerprints such as:

<title>phpMyAdmin</title> name="pma_username" phpmyadmin.css.php

the detector will report an exposed phpMyAdmin administration interface.

The plugin will also include:

• unit tests
• a vulnerable Docker image for verification
• a Kubernetes deployment file for Tsunami testbed integration.

[github-actions]

Welcome to the Tsunami patch reward program!

Your issue has been added to our triage queue and will reviewed
shortly. The panel usually takes a decision once per week, so it
can take up to a week before you hear back from us.

Please, do not start the work until the panel has reached a
decision. Although we always welcome contributions, unapproved
work is not eligible for a reward.

~The Tsunami PRP team