Description
PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $__redirect parameter, possibly involving the subform array.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | phpmyadmin | 4:2.6.4-pl2-1 | — |
| Debian 13 | phpmyadmin | 4:2.6.4-pl2-1 | — |
| Debian 12 | phpmyadmin | 4:2.6.4-pl2-1 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- phpMyAdmin 2.6.4-pl1 - Directory Traversal EDB-1244 · webapps · Oct 10, 2005 · verified
GitHub 2 repositories
-
RizeKishimaro/CVE-2005-3299 ★ 2 · May 22, 2022
CVE 2005 exploit.Perl in Perl.
-
Cr0w-ui/-CVE-2005-3299- ★ 0 · Jun 29, 2024
phpMyAdmin 2.6.4-pl1 - Directory Traversal
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-4
- 17137 third-party-advisory
- GLSA-200510-16 vendor-advisory
- 69 third-party-advisory
- 15053 vdb-entry