[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMZQgPncN9dcNGV2R8DtnpNwx7eoSkNlhCL6TECMg7Bg":3,"g5a-risk:CVE-2018-12613":131},{"success":4,"data":5,"meta":129},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":48,"references":49,"referencesCount":80,"weaknesses":81,"weaknessesCount":48,"isActivelyExploited":90,"cisaInfo":26,"otxData":26,"relatedBlogPosts":91,"seoMetadata":92,"configurations":117,"relatedVendorCves":127,"notableEvents":128},"CVE-2018-12613","What is CVE-2018-12613?","An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted pages. An attacker must be authenticated, except in the \"$cfg['AllowArbitraryServer'] = true\" case (where an attacker can specify any host he\u002Fshe is already in control of, and execute arbitrary code on phpMyAdmin) and the \"$cfg['ServerDefault'] = 0\" case (which bypasses the login requirement and runs the vulnerable code without any authentication).","An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server. The vulnerabil...","2018-06-21T20:29:00.327","2021-11-02T17:59:12.767",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.9835,[40,40,40,40,40,40,40],"High",[44],{"vendor":45,"product":45,"version":46,"criteria":47,"vulnerable":4},"phpmyadmin","*","cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",1,[50,57,61,65,69,72,75],{"url":51,"source":52,"tags":53},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F164623\u002FphpMyAdmin-4.8.1-Remote-Code-Execution.html","Packetstormsecurity",[54,55,56],"Exploit","Third Party Advisory","VDB Entry",{"url":58,"source":59,"tags":60},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F104532","Securityfocus",[55,56],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201904-16","Gentoo",[55],{"url":66,"source":67,"tags":68},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F44924\u002F","Exploit-db",[54,55,56],{"url":70,"source":67,"tags":71},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F44928\u002F",[55,56],{"url":73,"source":67,"tags":74},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F45020\u002F",[54,55,56],{"url":76,"source":77,"tags":78},"https:\u002F\u002Fwww.phpmyadmin.net\u002Fsecurity\u002FPMASA-2018-4\u002F","Phpmyadmin",[79],"Vendor Advisory",7,[82],{"id":83,"name":84,"description":85,"extendedDescription":86,"status":87,"abstraction":88,"structure":89},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":93,"metaDescription":94,"keywords":95,"canonicalUrl":96,"structuredData":97},"What is CVE-2018-12613? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-12613, a high severity cyber security vulnerability from 2018. High exploit probability (98.4%). An issue was discovered i...","CVE-2018-12613, CVE-2018-12613 vulnerability, CVE-2018-12613 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, phpmyadmin security, phpmyadmin vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2018-12613",{"@context":98,"@type":99,"headline":93,"description":94,"datePublished":10,"dateModified":11,"author":100,"publisher":104,"about":108,"mainEntityOfPage":112,"articleSection":115,"keywords":116},"https:\u002F\u002Fschema.org","TechArticle",{"@type":101,"name":102,"url":103},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":101,"name":102,"url":103,"logo":105},{"@type":106,"url":107},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":109,"name":6,"description":110,"additionalType":111},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":113,"@id":114},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-12613","Cybersecurity","CVE-2018-12613, CVE-2018-12613 vulnerability, CVE-2018-12613 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[118],{"Operator":26,"Negate":26,"Nodes":119},[120],{"Operator":121,"Negate":26,"CPEMatch":122},"OR",[123],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":124,"VersionStartExcluding":26,"VersionStartIncluding":125,"VersionEndExcluding":126,"VersionEndIncluding":26},"04FBC08B-0D3A-44E3-8C3D-82F6723EA7D9","4.8.0","4.8.2",[],[],{"lastModified":11,"cacheTime":130,"version":32},1792275868245,{"score":132,"band":42,"action":133,"scoredAt":134},77,"Patch now","2026-10-16T06:44:19.878695+00:00"]