Hi
There is no vulnerability in this - user needs to be logged in. You can do same
(without messing SQL injection) by directly passing SQL statements to
import.php or sql.php. Yes phpMyAdmin allows to execute queries to
authenticated users, but it's main task of this program and can not be
con
phpMyAdmin server_privileges.php SQL Injection Vulnerabilities.
I. BACKGROUND
phpMyAdmin is a tool written in PHP intended to handle the administration of
MySQL over the Web.
II. DESCRIPTION
phpMyAdmin server_privileges.php is prone to SQL Injection vulnerability. A
remote attacker may execute
