Security Alert
 

Hello everybody,

phpmyadmin-2.6.4-pl1.pl and all previous version contain a security hole.

Due to an error in grab_globals.lib.php it's possible to execute the command
'subform[][redirect]' in any form to see the contents of files outside the webroot.

I suggest to upgrade this as soon as possible as this is a quite serious
security hole.

See Sig! :thumbsup

asuming ppl leave phpmyadmin readable for everyone on a server?

or use weak password protection to protect their phpMyadmin....to exploit
this security you need to have access to phpMyAdmin.

security bump

bump for the nightcrew :winkwink: