Description
PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $__redirect parameter, possibly involving the subform array.
Remediation
References
Related Vulnerabilities
Restlet Framework XML Injection (aka Blind XPath Injection) Vulnerability (CVE-2013-4221)
Internet Information Services Other Vulnerability (CVE-2000-0126)
WordPress Plugin CallRail Phone Call Tracking Cross-Site Request Forgery (0.4.9)
WordPress Plugin MaxBlogPress Max Banner Ads Cross-Site Scripting (1.9)
WordPress Plugin Floating Cart for WooCommerce Security Bypass (1.2.2)