Security experts alerting on the availability in the underground black market of a zero day exploit for a vulnerability in the phpMoAdmin MongoDB GUI. The vulnerability is being available on several underground forums for sale. In time Im writing there is no patch yet available, users of MongoDB database are recommended to avoid using the free and open-source ‘phpMoAdmin’ The hacker known with the pseudonym sp1nlock has discovered a critical Zero-Day Remote Code Execution vulnerability.”]
Source: https://securityaffairs.co/wordpress/34380/breaking-news/phpmoadmin-mongodb-guizero-day.html