HTTP: PHPMyAdmin Setup Script Scan

This signature detects attempts to access the setup.php script of a PHPMyAdmin enabled website. Generally, this script is only enabled on an unconfigured installation of PHPMyAdmin , and is disabled after first use. If you are setting up PHPMyAdmin for the first time, you may trigger this signature non-maliciously. Otherwise, this is most likely an attempt to find an unconfigured PHPMyAdmin instance in your network. A successful attack could result in arbitrary code execution.

References

URL: http://www.phpmyadmin.net/home_page/index.php

Short Name

HTTP:PHP:PHPMYADMIN:SETUP-SCAN

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: PHPMyAdmin Setup Script Scan

References

Found a potential security threat?