Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-2631. PoCs published by Nasir Simbolon.
AI-analyzed exploit summary This exploit acts as a proxy between a client and a MySQL server, intercepting and manipulating the response to a 'SHOW TABLES' query to inject arbitrary PHP code into phpMyAdmin. The injected code executes a command to create a file, demonstrating remote code execution (RCE).
Description
Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name.
Exploits (1)
This exploit acts as a proxy between a client and a MySQL server, intercepting and manipulating the response to a 'SHOW TABLES' query to inject arbitrary PHP code into phpMyAdmin. The injected code executes a command to create a file, demonstrating remote code execution (RCE).