CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-2631

Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.142

EPSS Ranking 94.0%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2004-2631

Phpmyadmin » Phpmyadmin » Version: 2.5.1

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1
Phpmyadmin » Phpmyadmin » Version: 2.5.2

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2
Phpmyadmin » Phpmyadmin » Version: 2.5.2_pl1

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2_pl1
Phpmyadmin » Phpmyadmin » Version: 2.5.3

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3
Phpmyadmin » Phpmyadmin » Version: 2.5.4

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4
Phpmyadmin » Phpmyadmin » Version: 2.5.5

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5
Phpmyadmin » Phpmyadmin » Version: 2.5.5_pl1

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1
Phpmyadmin » Phpmyadmin » Version: 2.5.5_rc1

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1
Phpmyadmin » Phpmyadmin » Version: 2.5.5_rc2

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2
Phpmyadmin » Phpmyadmin » Version: 2.5.6_rc1

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1
Phpmyadmin » Phpmyadmin » Version: 2.5.6_rc2

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc2
Phpmyadmin » Phpmyadmin » Version: 2.5.7

cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-2631

Products

Pricing

Contact Us