Phpmyadmin Hacktricks !!link!! Access

SELECT '' INTO OUTFILE '/var/www/html/shell.php'; Gain OS-level access.

Once authenticated, or if a critical unauthenticated vulnerability exists, the goal shifts to gaining a shell on the host system. Remote Code Execution via LFI (CVE-2018-12613) phpmyadmin hacktricks

: If the DB user has FILE permissions, write a PHP web shell directly to the webroot. Data Exfiltration : Read sensitive system files via LOAD DATA INFILE . SELECT ' ' INTO OUTFILE '/var/www/html/shell