CVE-2015-2208

no score yetEPSS 61%

avinu phpmoadmin: no CVSS score yet. EPSS 61% chance of exploitation in the next 30 days.

The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter.

EPSS: 61% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2015-03-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

avinu:phpmoadmin

References

http://packetstormsecurity.com/files/130685/PHPMoAdmin-1.1.2-Remote-Code-Execution.html
http://seclists.org/fulldisclosure/2015/Mar/19
http://www.exploit-db.com/exploits/36251
http://www.openwall.com/lists/oss-security/2015/03/04/4
http://www.openwall.com/lists/oss-security/2015/03/04/5

Check your stack JSON