What happened
Arbitrary code execution in phpMyAdmin 4.8.0 and 4.8.1 via PHP injection enabling reverse shell.
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
Exploit-DB 45020phpMyAdmin - (Authenticated) Remote Code Execution (Metasploit)Metasploit2018-07-13VerifiedExploit-DB 44924phpMyAdmin 4.8.1 - (Authenticated) Local File Inclusion (1)ChaMd52018-06-21VerifiedExploit-DB 44928phpMyAdmin 4.8.1 - (Authenticated) Local File Inclusion (2)VulnSpy2018-06-22VerifiedExploit-DB 50457phpMyAdmin 4.8.1 - Remote Code Execution (RCE)samguy2021-10-25VerifiedSploitusArbitrary code execution in phpMyAdmin 4.8.0 and 4.8.1 via PHP injection enabling reverse shell.KitPloit2026-09-22T06:05:05Candidatekitploit.comArbitrary code execution in phpMyAdmin 4.8.0 and 4.8.1 via PHP injection enabling reverse shell.ru2026-09-22T06:05:05CandidatePoC-in-GitHub · 0x00-0x00/CVE-2018-12613PHPMyAdmin v4.8.0 and v.4.8.1 LFI exploit★ 100x00-0x002018-11-09CandidatePoC-in-GitHub · ivanitlearning/CVE-2018-12613Modified standalone exploit ported for Python 3★ 4ivanitlearning2019-09-16CandidatePoC-in-GitHub · eastmountyxz/CVE-2018-12613-phpMyAdmin这篇文章将分享一个phpMyAdmin 4.8.1版本的文件包含漏洞，从配置到原理，再到漏洞复现进行讲解，更重要的是让大家了解这些真实漏洞背后的知识。基础性文章，希望对您有所帮助！★ 2eastmountyxz2020-02-19CandidatePoC-in-GitHub · CyberCTF/vulhub-phpmyadmin-cve-2018-12613Vulhub phpmyadmin/CVE-2018-12613: phpMyAdmin 4.8.1 local file inclusion, run with Isoloom★ 0CyberCTF2026-10-08CandidateSource timeline
Discovered through Exploit-DBView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.