Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-uqku-hw3v-u7hh
Vulnerability ID VCID-uqku-hw3v-u7hh
Aliases CVE-2005-3299
Summary PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $__redirect parameter, possibly involving the subform array.
Status Published
Exploitability 2.0
Weighted Severity 0.1
Risk 0.2
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.10398 https://api.first.org/data/v1/epss?cve=CVE-2005-3299
epss 0.10398 https://api.first.org/data/v1/epss?cve=CVE-2005-3299
epss 0.10398 https://api.first.org/data/v1/epss?cve=CVE-2005-3299
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2005-3299
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3299
333433 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=333433
GLSA-200510-16 https://security.gentoo.org/glsa/200510-16
OSVDB-19911;CVE-2005-3299 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/1244.pl
Data source Exploit-DB
Date added Oct. 9, 2005
Description phpMyAdmin 2.6.4-pl1 - Directory Traversal
Ransomware campaign use Known
Source publication date Oct. 10, 2005
Exploit type webapps
Platform php
Source update date June 7, 2016
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.93346
EPSS Score 0.10398
Published At June 4, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T17:07:07.169863+00:00 Debian Importer Import https://security-tracker.debian.org/tracker/data/json 38.6.0