phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary commands via shell metacharacters.
Software | From | Fixed in |
---|---|---|
phpmyadmin / phpmyadmin | 2.4.0 | 2.4.0.x |
phpmyadmin / phpmyadmin | 2.5.0 | 2.5.0.x |
phpmyadmin / phpmyadmin | 2.5.1 | 2.5.1.x |
phpmyadmin / phpmyadmin | 2.5.2 | 2.5.2.x |
phpmyadmin / phpmyadmin | 2.5.4 | 2.5.4.x |
phpmyadmin / phpmyadmin | 2.5.5 | 2.5.5.x |
phpmyadmin / phpmyadmin | 2.5.5_pl1 | 2.5.5_pl1.x |
phpmyadmin / phpmyadmin | 2.5.5_rc1 | 2.5.5_rc1.x |
phpmyadmin / phpmyadmin | 2.5.5_rc2 | 2.5.5_rc2.x |
phpmyadmin / phpmyadmin | 2.5.6_rc1 | 2.5.6_rc1.x |
phpmyadmin / phpmyadmin | 2.5.7 | 2.5.7.x |
phpmyadmin / phpmyadmin | 2.5.7_pl1 | 2.5.7_pl1.x |
phpmyadmin / phpmyadmin | 2.6.0_pl1 | 2.6.0_pl1.x |
phpmyadmin / phpmyadmin | 2.6.0_pl2 | 2.6.0_pl2.x |
phpmyadmin / phpmyadmin | 2.6.0_pl3 | 2.6.0_pl3.x |