CVE-2004-2631: phpMyAdmin

High severity, CVSS 7.5. EPSS: 9.4% chance of exploitation in the next 30 days.

Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name.

Affected products

• phpMyAdmin phpMyAdmin: version 2.5.1 only; version 2.5.2 only; version 2.5.2_pl1 only; version 2.5.3 only; version 2.5.4 only; version 2.5.5 only; …

Published 2004-12-31. Last modified 2026-06-16.