CVSS: 7.5EPSS: 1%CPEs: 15EXPL: 0CVE-2004-2630
https://notcve.org/view.php?id=CVE-2004-2630
The MIME transformation system (transformations/text_plain__external.inc.php) in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. • http://marc.info/?l=bugtraq&m=109816584519779&w=2 http://marc.info/?l=full-disclosure&m=109810251501643&w=2 http://secunia.com/advisories/12813 http://secunia.com/advisories/12859 http://securitytracker.com/alerts/2004/Oct/1011761.html http://www.gentoo.org/security/en/glsa/glsa-200410-14.xml http://www.osvdb.org/10715 http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-2 http://www.securityfocus.com/bid/11391 https://exchange.xforce.ibmcloud.com/vul •
CVSS: 10.0EPSS: 1%CPEs: 15EXPL: 1CVE-2004-1147 – phpMyAdmin 2.x - External Transformations Remote Command Execution
https://notcve.org/view.php?id=CVE-2004-1147
phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary commands via shell metacharacters. • https://www.exploit-db.com/exploits/24817 http://marc.info/?l=bugtraq&m=110295781828323&w=2 http://www.exaprobe.com/labs/advisories/esa-2004-1213.html https://exchange.xforce.ibmcloud.com/vulnerabilities/18441 •
CVSS: 5.0EPSS: 0%CPEs: 15EXPL: 0CVE-2004-1148
https://notcve.org/view.php?id=CVE-2004-1148
phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sql_localfile parameter. • http://marc.info/?l=bugtraq&m=110295781828323&w=2 http://www.exaprobe.com/labs/advisories/esa-2004-1213.html https://exchange.xforce.ibmcloud.com/vulnerabilities/18441 •
CVSS: 6.8EPSS: 0%CPEs: 17EXPL: 2CVE-2004-1055
https://notcve.org/view.php?id=CVE-2004-1055
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PmaAbsoluteUri parameter, (2) the zero_rows parameter in read_dump.php, (3) the confirm form, or (4) an error message generated by the internal phpMyAdmin parser. • http://www.netvigilance.com/html/advisory0005.htm http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-3 https://exchange.xforce.ibmcloud.com/vulnerabilities/18158 •
CVSS: 5.0EPSS: 1%CPEs: 29EXPL: 2CVE-2004-0129 – phpMyAdmin 2.x - 'Export.php' File Disclosure
https://notcve.org/view.php?id=CVE-2004-0129
Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in the what parameter. Vulnerabilidad de atravesamiento de directorios en export.php en phpMyAdmin 2.5.5 y anteriores permite a atacantes remotos leer ficheros arbitrarios mediante secuencias .. (punto punto) en el parámetro what • https://www.exploit-db.com/exploits/23640 http://marc.info/?l=bugtraq&m=107582619125932&w=2 http://secunia.com/advisories/10769 http://security.gentoo.org/glsa/glsa-200402-05.xml http://sourceforge.net/forum/forum.php?forum_id=350228 http://www.osvdb.org/3800 http://www.phpmyadmin.net/home_page/relnotes.php?rel=0 http://www.securityfocus.com/bid/9564 https://exchange.xforce.ibmcloud.com/vulnerabilities/15021 •