CVE-2013-3238

CVE-2013-3238 is a remote code execution vulnerability affecting phpMyAdmin versions 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3. Authenticated attackers can exploit a flaw in the "Replace table prefix" feature by injecting a specific character sequence, leading to arbitrary code execution. With a CVSS score of 6.0, this vulnerability is of medium severity, requiring authentication and moderate attack complexity, but potentially allowing partial confidentiality, integrity, and availability compromise. While not listed on the KEV catalog, exploit modules exist in Metasploit and ExploitDB, indicating readily available exploit code. Despite this, there is no evidence of active exploitation or significant community discussion.