CVE-2012-5159

CVE-2012-5159 describes a Trojan Horse vulnerability in phpMyAdmin 3.5.2.2, specifically within the server_sync.php file, which was distributed via a compromised cdnetworks-kr-1 mirror. This flaw allows remote attackers to execute arbitrary PHP code through an eval injection. The vulnerability is rated with a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. Exploit intelligence confirms the existence of a Metasploit module and an ExploitDB entry, indicating readily available exploit code. While not on the KEV catalog, its high EPSS score and community discussion suggest significant attention and a high likelihood of exploitation.