← All CVEs

CVE-2005-3299

medium · 5

PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $__redirect parameter, possibly involving the subform array.

5
CVSS
15.9%
EPSS (exploit prob.)
97th
EPSS percentile
2005-10-23
Published

AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

VendorProductAffected versions
phpmyadminphpmyadmin2.6.4
phpmyadminphpmyadmin2.6.4_pl1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2005-3299