Evil-DB LogoEvil-DB
← All CVEs

CVE-2004-1147

high · 10

phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary commands via shell metacharacters.

10
CVSS
11.6%
EPSS (exploit prob.)
96th
EPSS percentile
2005-01-10
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

VendorProductAffected versions
phpmyadminphpmyadmin2.4.0
phpmyadminphpmyadmin2.5.0
phpmyadminphpmyadmin2.5.1
phpmyadminphpmyadmin2.5.2
phpmyadminphpmyadmin2.5.4
phpmyadminphpmyadmin2.5.5
phpmyadminphpmyadmin2.5.5_pl1
phpmyadminphpmyadmin2.5.5_rc1
phpmyadminphpmyadmin2.5.5_rc2
phpmyadminphpmyadmin2.5.6_rc1
phpmyadminphpmyadmin2.5.7
phpmyadminphpmyadmin2.5.7_pl1
phpmyadminphpmyadmin2.6.0_pl1
phpmyadminphpmyadmin2.6.0_pl2
phpmyadminphpmyadmin2.6.0_pl3

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2004-1147