Administration page (phpMyAdmin)

  • PCI 3.2-6.5.1
  • CWE 538
  • CAPEC 111
  • OWASP 2017-A6
  • WASC 33
  • CWE 425
  • WASC 34

phpMyAdmin is an application written in the PHP language that provides a web-based interface for the administration of MySQL databases. The initial MySQL root account password is empty, so anyone can connect to the MySQL server as root, without a password and be granted all privileges.

Remediation

If you have never set a root password for MySQL, the server does not require a password at all for connecting as root. To setup root password for first time, use the mysqladmin tool.

References