Security Advisory
CVE-2004-1148
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sql_localfile parameter.