Lucene search
+L

6715 matches found

OSV
OSV
•added 2004/12/31 5:00 a.m.•23 views

CVE-2004-2631

Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name...

7.8AI score
SaveExploits0References14
OSV
OSV
•added 2004/12/31 5:00 a.m.•11 views

CVE-2004-2632

phpMyAdmin 2.5.1 up to 2.5.7 allows remote attackers to modify configuration settings and gain unauthorized access to MySQL servers via modified $cfg'Servers' variables...

6.9AI score
SaveExploits0References12
OSV
OSV
•added 2004/12/31 5:00 a.m.•15 views

DEBIAN-CVE-2004-2630

The MIME transformation system transformations/textplainexternal.inc.php in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...

7.5CVSS7.5AI score0.02926EPSS
SaveExploits0References1
OSV
OSV
•added 2004/12/31 5:00 a.m.•12 views

CVE-2004-2630

The MIME transformation system transformations/textplainexternal.inc.php in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...

7.4AI score
SaveExploits0References11
OSV
OSV
•added 2004/12/31 5:00 a.m.•13 views

DEBIAN-CVE-2004-2631

Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name...

7.5CVSS7.8AI score0.09353EPSS
SaveExploits2References1
NVD
NVD
•added 2004/12/31 5:00 a.m.•35 views

CVE-2004-2630

The MIME transformation system transformations/textplainexternal.inc.php in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...

7.5CVSS7.4AI score0.02926EPSS
SaveExploits0References10
NVD
NVD
•added 2004/12/31 5:00 a.m.•46 views

CVE-2004-2631

Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name...

7.5CVSS7.6AI score0.09353EPSS
SaveExploits2References12
NVD
NVD
•added 2004/12/31 5:00 a.m.•35 views

CVE-2004-2632

phpMyAdmin 2.5.1 up to 2.5.7 allows remote attackers to modify configuration settings and gain unauthorized access to MySQL servers via modified $cfg'Servers' variables...

7.5CVSS6.6AI score0.03764EPSS
SaveExploits1References10
Tenable Nessus
Tenable Nessus
•added 2004/12/20 12:00 a.m.•50 views

GLSA-200412-19 : phpMyAdmin: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200412-19 phpMyAdmin: Multiple vulnerabilities Nicolas Gregoire exaprobe.com has discovered two vulnerabilities that exist only on a webserver where PHP safemode is off. These vulnerabilities could lead to command execution or fil...

10CVSS5.8AI score0.11592EPSS
SaveExploits1References5
Gentoo Linux
Gentoo Linux
•added 2004/12/19 12:00 a.m.•58 views

phpMyAdmin: Multiple vulnerabilities

Background phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL databases from a web-browser. Description Nicolas Gregoire exaprobe.com has discovered two vulnerabilities that exist only on a webserver where PHP safemode is off. These vulnerabilities could lead to...

10CVSS1AI score0.11592EPSS
SaveExploits1
Cvelist
Cvelist
•added 2004/12/15 5:00 a.m.•39 views

CVE-2004-1148

phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sqllocalfile parameter...

6.4AI score0.01418EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2004/12/15 5:00 a.m.•45 views

CVE-2004-1147

phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary commands via shell metacharacters...

10CVSS7.4AI score0.11592EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2004/12/15 5:00 a.m.•60 views

CVE-2004-1148

phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sqllocalfile parameter...

5CVSS6.5AI score0.01418EPSS
SaveExploits0
CVE
CVE
•added 2004/12/15 5:00 a.m.•83 views

CVE-2004-1147

Affected software: phpMyAdmin 2.6.0-pl2 and earlier versions before 2.6.1. Vulnerable condition: external MIME-based transformations enabled. Root cause: input containing shell metacharacters leads to remote command execution. Impact: allows remote attackers to execute arbitrary commands on the s...

10CVSS7.4AI score0.11592EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2004/12/15 5:00 a.m.•45 views

CVE-2004-1147

phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary commands via shell metacharacters...

7.4AI score0.11592EPSS
SaveExploits1References3
CVE
CVE
•added 2004/12/15 5:00 a.m.•82 views

CVE-2004-1148

CVE-2004-1148 affects phpMyAdmin releases prior to 2.6.1 when UploadDir is enabled. The underlying issue lets an attacker read arbitrary files via the sql_localfile parameter, constituting a file-disclosure vulnerability with partial confidentiality impact (CVSS base 5.0). Public references indic...

5CVSS6.4AI score0.01418EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/12/15 12:00 a.m.•7 views

CVE-2004-1148: Undefined Security Weakness

phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sqllocalfile parameter...

5CVSS6AI score0.01418EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2004/12/15 12:00 a.m.•47 views

Multiple vulnerabilities in phpMyAdmin

Exaprobe www.exaprobe.com Security Advisory Advisory Name: Multiple vulnerabilities in phpMyAdmin Release Date: 13 December 2004 Application: phpMyAdmin prior to 2.6.1-rc1 Platform: Any webserver running PHP Severity: Remote code execution Author: Nicolas Gregoire [email protected] Vendor...

10CVSS0.6AI score0.11592EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/12/15 12:00 a.m.•6 views

CVE-2004-1147: Undefined Security Weakness

phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary commands via shell metacharacters...

10CVSS6.3AI score0.11592EPSS
SaveExploits1References1
exploitpack
exploitpack
•added 2004/12/13 12:00 a.m.•24 views

phpMyAdmin 2.x - External Transformations Remote Command Execution

phpMyAdmin 2.x - External Transformations Remote Command Execution source: https://www.securityfocus.com/bid/11886/info phpMyAdmin is reported prone to multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands and disclose files on a vulnerable compute...

0.7AI score
SaveExploits0
Rows per page
Query Builder