2.6.0.pl1

DATE	CVE	VULNERABILITY TITLE	RISK
2005-01-10	CVE-2004-1148	Unspecified vulnerability in PHPmyadmin phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sql_localfile parameter. network low complexity phpmyadmin	5.0
2005-01-10	CVE-2004-1147	Unspecified vulnerability in PHPmyadmin phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary commands via shell metacharacters. network low complexity phpmyadmin critical	10.0
2004-12-31	CVE-2004-2630	Remote Command Execution vulnerability in phpMyAdmin The MIME transformation system (transformations/text_plain__external.inc.php) in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. network low complexity phpmyadmin	7.5