CVE-2004-2630

The MIME transformation system (transformations/text_plain__external.inc.php) in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.

• http://marc.info/?l=bugtraq&m=109816584519779&w=2
• http://marc.info/?l=full-disclosure&m=109810251501643&w=2
• http://secunia.com/advisories/12813Patch
• http://secunia.com/advisories/12859Patch, Vendor Advisory
• http://securitytracker.com/alerts/2004/Oct/1011761.htmlPatch
• http://www.gentoo.org/security/en/glsa/glsa-200410-14.xmlPatch
• http://www.osvdb.org/10715
• http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-2Patch
• http://www.securityfocus.com/bid/11391Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17698
• http://marc.info/?l=bugtraq&m=109816584519779&w=2
• http://marc.info/?l=full-disclosure&m=109810251501643&w=2
• http://secunia.com/advisories/12813Patch
• http://secunia.com/advisories/12859Patch, Vendor Advisory
• http://securitytracker.com/alerts/2004/Oct/1011761.htmlPatch
• http://www.gentoo.org/security/en/glsa/glsa-200410-14.xmlPatch
• http://www.osvdb.org/10715
• http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-2Patch
• http://www.securityfocus.com/bid/11391Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17698

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-2624Cross-site scripting (XSS) vulnerability in "TextSearch" in …
• CVE-2004-2625Cross-site scripting (XSS) vulnerability in Outblaze Email a…
• CVE-2004-2626GUI overlay vulnerability in the Java API in Siemens S55 cel…
• CVE-2004-2627Java 2 Micro Edition (J2ME) does not properly validate bytec…
• CVE-2004-2628Multiple directory traversal vulnerabilities in thttpd 2.07 …
• CVE-2004-2629Multiple vulnerabilities in the H.323 protocol implementatio…
• CVE-2004-2631Eval injection vulnerability in left.php in phpMyAdmin 2.5.1…
• CVE-2004-2632phpMyAdmin 2.5.1 up to 2.5.7 allows remote attackers to modi…
• CVE-2004-2633Unspecified vulnerability in Sesamie 1.0 allows remote anony…
• CVE-2004-2634The (1) bos.rte.serv_aid or (2) bos.rte.console filesets in …
• CVE-2004-2635An ActiveX control for McAfee Security Installer Control Sys…
• CVE-2004-2636TinyWeb 1.9 allows remote attackers to read source code of s…