CVE-2012-5159

Name of the Vulnerable Software and Affected Versions phpMyAdmin version 3.5.2.2

Description The issue allows remote attackers to execute arbitrary PHP code via an eval injection attack due to an externally introduced modification in the server sync.php file.

Recommendations For phpMyAdmin version 3.5.2.2, consider removing or replacing the modified server sync.php file to prevent eval injection attacks. As a temporary workaround, restrict access to the server sync.php file until a clean version can be restored.