Softpedia – (International) Backdoor in phpMyAdmin allows hackers to execute PHP code. phpMyAdmin warned customers that a kit hosted on the SourceForge.net mirror system was found to contain a backdoor that allows remote attackers to execute arbitrary PHP code. The developers were notified by the Tencent Security Response Center that the distribution contains a malicious file. The affected mirror is called cdnetworks-kr-1, the backdoor being located in the server_sync.php file. Apparently, this was not the only corrupt file. The phpMyAdmin development team claims a second file — js/cross_framing_protection.js — was also modified. The vulnerability was cataloged as critical.