CVE-2005-3299: phpMyAdmin

Medium severity, CVSS 5.0. EPSS: 15.9% chance of exploitation in the next 30 days.

PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $__redirect parameter, possibly involving the subform array.

Affected products

• phpMyAdmin phpMyAdmin: version 2.6.4 only; version 2.6.4_pl1 only

Published 2005-10-23. Last modified 2026-06-16.