CVE-2004-2631

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-2631

eval injection

phpmyadmin

remote code execution

vulnerability

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.055 Low

EPSS

Percentile

93.1%

JSON

Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name.

CPENameOperatorVersion
phpmyadmin:phpmyadminphpmyadmineq2.5.2_pl1
phpmyadmin:phpmyadminphpmyadmineq2.5.5_rc1
phpmyadmin:phpmyadminphpmyadmineq2.5.5
phpmyadmin:phpmyadminphpmyadmineq2.5.7
phpmyadmin:phpmyadminphpmyadmineq2.5.6_rc1
phpmyadmin:phpmyadminphpmyadmineq2.5.2
phpmyadmin:phpmyadminphpmyadmineq2.5.1
phpmyadmin:phpmyadminphpmyadmineq2.5.4
phpmyadmin:phpmyadminphpmyadmineq2.5.3
phpmyadmin:phpmyadminphpmyadmineq2.5.6_rc2

CPE	Name	Operator	Version
phpmyadmin:phpmyadmin	phpmyadmin	eq	2.5.2_pl1
phpmyadmin:phpmyadmin	phpmyadmin	eq	2.5.5_rc1
phpmyadmin:phpmyadmin	phpmyadmin	eq	2.5.5
phpmyadmin:phpmyadmin	phpmyadmin	eq	2.5.7
phpmyadmin:phpmyadmin	phpmyadmin	eq	2.5.6_rc1
phpmyadmin:phpmyadmin	phpmyadmin	eq	2.5.2
phpmyadmin:phpmyadmin	phpmyadmin	eq	2.5.1
phpmyadmin:phpmyadmin	phpmyadmin	eq	2.5.4
phpmyadmin:phpmyadmin	phpmyadmin	eq	2.5.3
phpmyadmin:phpmyadmin	phpmyadmin	eq	2.5.6_rc2