CVE-2004-2631: High severity phpMyAdmin phpMyAdmin vulnerability
Published Dec 31, 2004
·Updated
Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name.
Affected Software
12 affected components
phpMyAdmin phpMyAdmin=2.5.2_pl1
phpMyAdmin phpMyAdmin=2.5.5_rc1
phpMyAdmin phpMyAdmin=2.5.5
phpMyAdmin phpMyAdmin=2.5.7
phpMyAdmin phpMyAdmin=2.5.6_rc1
phpMyAdmin phpMyAdmin=2.5.2
phpMyAdmin phpMyAdmin=2.5.1
phpMyAdmin phpMyAdmin=2.5.4
phpMyAdmin phpMyAdmin=2.5.3
phpMyAdmin phpMyAdmin=2.5.6_rc2
phpMyAdmin phpMyAdmin=2.5.5_rc2
phpMyAdmin phpMyAdmin=2.5.5_pl1
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Dec 5, 2005
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2631?
CVE-2004-2631 has a high severity rating due to its potential to allow remote code execution.
2
How do I fix CVE-2004-2631?
To fix CVE-2004-2631, upgrade to phpMyAdmin version 2.5.8 or later, which includes patches addressing this vulnerability.
3
What versions of phpMyAdmin are affected by CVE-2004-2631?
CVE-2004-2631 affects phpMyAdmin versions 2.5.1 to 2.5.7, including various release candidates and patches.
4
Can CVE-2004-2631 be exploited remotely?
Yes, CVE-2004-2631 can be exploited remotely, allowing attackers to execute arbitrary PHP code.
5
What type of vulnerability is CVE-2004-2631 classified as?
CVE-2004-2631 is classified as an eval injection vulnerability.