Category: Security

Critical phpMyAdmin Vulnerabilities DiscoveredA number of bloggers and web site owners use phpMyAdmin for easy database administration. Two critical vulnerabilities have been discovered that could be used to gain full access to the affected server.
Exploits have already been made publicly available, see GNUCITIZEN for an example:

http://172.16.211.10/phpMyAdmin-3.0.1.1//config/
config.inc.php?p=phpinfo();

Description
Setup script used to generate configuration can be fooled using a crafted POST […]

http://feedproxy.google.com/~r/BlogSecurity/~3/kdAeYGwBzxc/critical-phpmyadmin-vulnerabilities-discovered

Critical phpMyAdmin Vulnerabilities DiscoveredA number of bloggers and web site owners use phpMyAdmin for easy database administration. Two critical vulnerabilities have been discovered that could be used to gain full access to the affected server.
Exploits have already been made publicly available, see GNUCITIZEN for an example:

http://172.16.211.10/phpMyAdmin-3.0.1.1//config/
config.inc.php?p=phpinfo();

Description
Setup script used to generate configuration can be fooled using a crafted POST […]

http://feedproxy.google.com/~r/BlogSecurity/~3/kdAeYGwBzxc/critical-phpmyadmin-vulnerabilities-discovered

I know this tip isn’t always ideal for a lot of the bloggers out there, but it’s always a good idea to run anything locally in a test environment before uploading to a live site.

Thank God, I found this article! Few days back, when I was trying to modify one of my blog’s theme footer (I had to add sitemeter code next to the footer links), I saw such kind of codes. Initially I could not understand anything from that code and hence thought of removing that suspicious long code from the footer.php. But surprisingly my blog went down and it did not open. It was displaying a notice “Theme Error”.

I could not dare to take any chance. So, I restored the footer.php from the backup via FTP client. And then everything started working normally. After that I simply changed that theme and now using another one.

Also, I have seen few themes with malicious iframe links in the footer. So, it’s a wise idea to check theme files manually before using.