Deployed ASP.NET core 3.1 application in Google Kubernetes. Docker is built mcr.microsoft.com/dotnet/core/aspnet:3.1-bionic AS base.
Exposed the application with Ingress service. When doing penetration testing getting PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin using Metasploit.
Any suggestion or help to resolve this would be greatly appreciated.
Also, I have tried the below possible ways to remove this vulnerability.
- Tried to uninstall the phpMyAdmin in the docker, but phpMyAdmin is not found
- Tried to install and uninstall the phpMyAdmin.