CVE-2004-2631

2005-12-0422:00:00

mitre

web.nvd.nist.gov

cve-2004-2631

eval injection

phpmyadmin

remote code execution

vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.055

Percentile

93.3%

JSON

Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name.

Affected configurations

Nvd

Node

phpmyadminphpmyadminMatch2.5.1

phpmyadminphpmyadminMatch2.5.2

phpmyadminphpmyadminMatch2.5.2_pl1

phpmyadminphpmyadminMatch2.5.3

phpmyadminphpmyadminMatch2.5.4

phpmyadminphpmyadminMatch2.5.5

phpmyadminphpmyadminMatch2.5.5_pl1

phpmyadminphpmyadminMatch2.5.5_rc1

phpmyadminphpmyadminMatch2.5.5_rc2

phpmyadminphpmyadminMatch2.5.6_rc1

phpmyadminphpmyadminMatch2.5.6_rc2

phpmyadminphpmyadminMatch2.5.7

VendorProductVersionCPE
phpmyadminphpmyadmin2.5.1cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.5.2cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.5.2_pl1cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2_pl1:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.5.3cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.5.4cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.5.5cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.5.5_pl1cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.5.5_rc1cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.5.5_rc2cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.5.6_rc1cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpmyadmin	phpmyadmin	2.5.1	cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:::::::*
phpmyadmin	phpmyadmin	2.5.2	cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:::::::*
phpmyadmin	phpmyadmin	2.5.2_pl1	cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2_pl1:::::::*
phpmyadmin	phpmyadmin	2.5.3	cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:::::::*
phpmyadmin	phpmyadmin	2.5.4	cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:::::::*
phpmyadmin	phpmyadmin	2.5.5	cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:::::::*
phpmyadmin	phpmyadmin	2.5.5_pl1	cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:::::::*
phpmyadmin	phpmyadmin	2.5.5_rc1	cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:::::::*
phpmyadmin	phpmyadmin	2.5.5_rc2	cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:::::::*
phpmyadmin	phpmyadmin	2.5.6_rc1	cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:::::::*