CVE-2005-3299

phpMyAdmin <2.6.4-2.6.4-pl1 - RCE

Title source: llm
STIX 2.1

Description

PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $__redirect parameter, possibly involving the subform array.

Exploits (3)

exploitdb WORKING POC VERIFIED
by cXIb8O3 · perlwebappsphp
https://www.exploit-db.com/exploits/1244
nomisec WORKING POC 2 stars
by RizeKishimaro · poc
https://github.com/RizeKishimaro/CVE-2005-3299
nomisec NO CODE
by Cr0w-ui · poc
https://github.com/Cr0w-ui/-CVE-2005-3299-

Scores

EPSS 0.0886
EPSS Percentile 92.6%

Details

Status published
Products (2)
phpmyadmin/phpmyadmin 2.6.4
phpmyadmin/phpmyadmin 2.6.4_pl1
Published Oct 23, 2005
Tracked Since Feb 18, 2026