Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-4w72-3j8g-5kbg
Vulnerability ID VCID-4w72-3j8g-5kbg
Aliases CVE-2004-2631
Summary Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name.
Status Published
Exploitability 2.0
Weighted Severity 0.1
Risk 0.2
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.14197 https://api.first.org/data/v1/epss?cve=CVE-2004-2631
epss 0.14197 https://api.first.org/data/v1/epss?cve=CVE-2004-2631
epss 0.14197 https://api.first.org/data/v1/epss?cve=CVE-2004-2631
epss 0.14197 https://api.first.org/data/v1/epss?cve=CVE-2004-2631
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2004-2631
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2631
GLSA-200407-22 https://security.gentoo.org/glsa/200407-22
OSVDB-7314;CVE-2004-2631 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/309.c
Data source Exploit-DB
Date added July 3, 2004
Description phpMyAdmin 2.5.7 - Remote code Injection
Ransomware campaign use Known
Source publication date July 4, 2004
Exploit type webapps
Platform php
Source update date March 28, 2016
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.94512
EPSS Score 0.14197
Published At June 4, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T17:07:06.709507+00:00 Debian Importer Import https://security-tracker.debian.org/tracker/data/json 38.6.0