phpmywebhosting 0.3.4 has a SQL injection vulnerability where an attacker can be authenticated as an admin by just using [usr= admin”-(] and [pass=”asdf].
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34097/phpMyWeb.txt
Source: https://packetstormsecurity.com/files/34097/phpMyWeb.txt.html