CVE:CVE-2006-1804
CNNVD:CNNVD-200604-273
phpMyAdmin 2.7.0-pl1中的sql.php存在SQL注入漏洞。这使得远程攻击者可以借助于sql_query参数执行任意SQL命令。
solution:Upgrade phpmyadmin phpmyadmin to a higher version than 2.7.0_pl1,2.8.0.3,and avoid the version 2.7.0_pl1,2.8.0.3