Description
The MIME transformation system (transformations/text_plain__external.inc.php) in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.
Remediation
References
Related Vulnerabilities
PrestaShop Observable Timing Discrepancy Vulnerability (CVE-2026-25597)
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.51)
WordPress Plugin Health Check & Troubleshooting Arbitrary File Disclosure (1.2.3)
WordPress Plugin Featurific For WordPress 'snum' Parameter Cross-Site Scripting (1.6.2)
Squid Missing Release of Resource after Effective Lifetime Vulnerability (CVE-2018-19132)